Users banned for used functions normally

Posted: Sun Jun 13, 2004 12:24 pm

Ok I'm not sure I want to use Sentinel anymore. It seems like a great software, and I have a huge list of banned IPs.

But today I went to MY site, I was auto logged in, clicked on Reviews, clicked Post Commend. Then I was banned. I'm not happy!!!

If this banned me for just wanting to post a review comment, how many of those banned IP's are just people wanting to use the site as intended.

Does it have something to do with the auto log in?

AND

Where in my database is my IPs stored so I can delete my IP to unban myself.

Posted: Sun Jun 13, 2004 12:26 pm

Never mine I finally found the IPs.

But why did it just ban me? Crying or Very sad

Posted: Sun Jun 13, 2004 12:37 pm

Ok not the frustration level is high!!! Something is not right!! I deleted my IP, logged out ... rebooted .... revisited my site ... Logged in ... and was banned again for trying to post a review Bang Head

I'm on 1.2, php-nuke 7.2, chat's updated, and Raven's hackattempt

Regular Joined: May 31, 2004 Posts: 95 Location: NY

Probably some bug in Nuke Reviews. Can you at least give us the ban information if you receive emails about it? That way we know what link you used to get yourself banned.

Thanks.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

And also what line 380 and 381 are. Sentinel only tries to write to .htaccess, so unless .htaccess is write protected I can't imagine what's going on.

Posted: Sun Jun 13, 2004 9:30 pm

Raven, I'm sorry for doubting you Embarassed

Turns out I reuploaded the original Review (basically over wrote chatserv's update) and it's working ok.

I hope that this doesn't open me back up to hacking. I wonder what the difference is. When I have more time I'll compair the original and update line by line to see.

Posted: Sun Jun 13, 2004 9:33 pm

- As long as sentinel is installed, you should be fine! Also, get me HTTP Auth hack installed. It will double protect your admin login Wink

Posted: Sun Jun 13, 2004 9:40 pm

is that the hackattempt.php? If it is it's installed. if it's something else, I don't think I've found it yet Smile

It's kinda strange, one day I can download stuff, the next day I can't, then a couple days later I can again. Me and my stupid compter ... lol!!!

Posted: Sun Jun 13, 2004 9:43 pm

Sentinel(tm) and not Hack Alert. The HTTP Auth can be found at http://www.ravenphpscripts.com/postt1460.html

New Member Joined: Dec 22, 2003 Posts: 21

Today someone was banned from my site .... they emailed me to that effect saying they were only browsing and why were they banned?

Here is what Sentinal is saying they used that caused the ban:

Quote:

mywebsite.com/phpnuke/modules.php?set_fullOnly=off&return=modules.php%3Fid%3DChassis%26op%3Dmodload%26name%3Dgallery%26file%3Dindex%26include%3Dview_photo.php&cmd=&op=modload&name=gallery&file=index&include=do_command.php

I'm more of a user than anything else so this means little to me... was this users action normal or are they just trying it on?

Using:
Nuke 7.1
Gellery 1.4.1
Sentinal and a bunch of other stuff.

regards
James Mc

Posted: Tue Jun 15, 2004 7:07 am

See these posts

http://www.ravenphpscripts.com/postt1861.html
http://www.ravenphpscripts.com/postt1796.html

Also, in the future when reporting Sentinel(tm) issues, please post the top part of the email that you received to help us more easily determine the cause.

Posted: Tue Jun 15, 2004 7:12 am

OK thanks for the quick response.

regards
James Mc