illegal operation upon logging in

Posted: Tue Nov 13, 2007 11:08 am

when a user of mine goes to login she gets a white page with the text "Illegal Operation" message.

She gave me her login details and I did it myself and she actually does get logged in because when you go back to the main page after the Illegal Operation page, it shows her welcome then username message. But why is she getting this illegal message on a blank screen upon logging in?

I have tried setting up a few test accounts to see if those usernames get the same error but they don't. Other usernames seem to be working fine. Any ideas? thanks.

Posted: Tue Nov 13, 2007 11:58 am

Have you tried turning on error reporting to see if any errors are generated?

Also it's worth checking your logs to see if anything is picked up.

So this is happening on any computer that she tries to login from?

Are there any unusual characters in the username, or password?

Posted: Tue Nov 13, 2007 12:41 pm

i haven't checked the error logs...will do that. this is happening on her computer and mine and no, her username she's wanting is "execmomskc" so nothing unusual with that, right?

registered · Posted: Tue Nov 13, 2007 4:17 pm

This is with PHP-Nuke 7.9? Yeah it might have a problem with "exec". In 7.9 the author put in some feeble checks for attacks. You are better off removing those checks and installing Sentinel, and/or switching to RavenNuke, which already has Sentinel.

Posted: Tue Nov 13, 2007 4:36 pm

I would agree. Looks like the first 3 or 4 letters of the username are the problem.

Posted: Tue Nov 13, 2007 11:31 pm

Gremmie wrote:

This is with PHP-Nuke 7.9? Yeah it might have a problem with "exec". In 7.9 the author put in some feeble checks for attacks. You are better off removing those checks and installing Sentinel, and/or switching to RavenNuke, which already has Sentinel.

how/where would i find those checks to remove them? would it be a fairly easy transition to get revennuke? i am totally clueless about switching over! thanks.

Posted: Wed Nov 14, 2007 7:53 am

The checks are in mainfile.php file. There is a thread I started about them around here somewhere back when I was using 7.9.

"Fairly easy" is relative to your experience level. Wink

I posted a mySQL script that will convert 7.9 database tables to the format expected by RavenNuke. If you use a converted database with a brand new set of RavenNuke files it should go ok.