Blank Page when i test Sentinel?!

Posted: Sat Aug 07, 2004 3:09 am

Hi everybody! Very Happy

I've install Sentinel on 2 pages, same version, same fixes, same server!
At 1 site, Sentinel works pervectly but on the other site there is only a blank page when i test sentinel with differnt strings and codes! Shocked

No Error messages or others, only a white page!
Where can i find the mistake?

Coldy Cool

Client Joined: Apr 10, 2004 Posts: 649 Location: UK

You need to edit modules/Your_Account/index.php manually

If you read the README file in the Sentinel download folder you'll see how to do this.

Posted: Sat Aug 07, 2004 3:52 am

I've change this, but is the same!
Only a white page when i test it! Confused

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Review your server error log to see what errors may be posted.

Posted: Sun Aug 08, 2004 3:09 am

*hehe* It works now! Wave

I've deinstall all files and folders delete the database and install once more!
Now it works! Dance-Y

But i dont know why! Confused

Thanks for help! Very Happy

Coldy

Worker Joined: Feb 18, 2004 Posts: 244

I have this same problem.

Sentinel 2.0.1
Nuke 7.4
Chatserv Patches - 2.x (I blieve it's 2.6 - preinstalled)

After testing with a known attack I get a blank page. No ban occurs, no message, no redireciton. So I tried a second different attack and got the same result. Both were Union attacks.

You may PM me a different exploit if you'd like me to try it.

It's a clean install of Nuke 7.4 with chatserv's patches preinstalled. I downloaded it from here. From what I gather there is no need to edit the Your_Account module with this version, right?

I cannot find those exact strings mentioned in the instructions.

Also, the word installation document does NOT say to add the include line to mainfile.php, but I cought that researching here in the forum. That's since been added.

I've edited javascript.php, header.php and mainfile.php.

.htaccess is chmod'ed to 666, a blank line does exist at the end of the file.

The new tables do exist in the database.

My test user is not a protected admin. Nor is it another person from my PC either. lol It's a remote user.

Any suggestions?

Posted: Thu Aug 19, 2004 7:09 pm

Darrell3831,
Thanks for pointing that out, I'll get the changes made to the User Guide tonight. Terribly sorry that I missed it.

Posted: Thu Aug 19, 2004 7:13 pm

That's quite alright.

I knew it was an include and with a little searching on the forum I was able to find it right away.

I'm still having trouble tracking down the blank page problem though. Any ideas??

thanks,
Darrell

Posted: Thu Aug 19, 2004 8:48 pm

Darrel thats one I can't say I've run into. Have you tried without the htaccess ban to see if it can write to the database alone?

Posted: Thu Aug 19, 2004 9:05 pm

I just went into the sentinel configuration and deleted the path to the htaccess file... There is nothing in that field now. To my knowledge that's all I need to do to not use the .htaccess file. Right?

My test user is offline for the night, but I tried it myself and still got the blank white page.

I'm using a UNION exploit as my test string. Under the sentinal config the union exploit is set to email, block, & forward.

There is a URl in forward..

I also telnetted into my account and tailed the error log. It is not throwing any sort of error at all.

tail -f error_log

I watch the log, try the exploit, and nothing new appears in the error log.

Other aspects of the script work. HTTPAuth works, closing the site works. Changing values in the config saves to the database.

The particular union exploit I'm using would have been cought by protector if it were still installed.

Any ideas??

thanks,
Darrell

Posted: Thu Aug 19, 2004 9:14 pm

There must be something wrong with the exploit that I'm trying to use. Although it is directly from a protector email to me.

I just turned on the string blocker and entered nonesense... "humptydumpty" and tried it... It cought me and said it was going to block me.

Of course I'm protected though.. So it didnt.

Can someone PM me a UNION exploit that Sentinel does catch?

Thanks,
Darrell

Posted: Thu Aug 19, 2004 9:21 pm

It's a brand new install.

I totally deleted my old site's public_html files. I kept the database though and just upgraded it from 6.9 to 7.4.

Nuke 7.4 from here, with chatserv's patches preinstalled.

I've made like one edit to the theme. I changed a background color up in the top block. LOL

That's it.

I did reupload the complete sentinel package twice already. Was careful with ASCII and Binary where appropriate.

Darrell