Quick question on mainfile.php edit

New Member Joined: Aug 03, 2005 Posts: 3

The readme says to comment out:

Code:

//Union Tap


//Copyright Zhen-Xjell 2004 http://nukecops.com


//Beta 3 Code to prevent UNION SQL Injections


//unset($matches);


//unset($loc);


//if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER["QUERY_STRING"]), $matches)) {


//   die();


//}

My mainfile.php file has an extra line:

Code:

unset($matches);


unset($loc);


if(isset($_SERVER['QUERY_STRING'])) {


if (preg_match("/([OdWo5NIbpuU4V2iJT0n]{5}) /", rawurldecode($loc=$_SERVER['QUERY_STRING']), $matches)) {


    die('Illegal Operation');


  }


}

Should I comment it out anyway??

Also, where it says to comment out:

Code:

//$queryString = strtolower($_SERVER['QUERY_STRING']);


//if (stripos_clone($queryString,'%20union%20') OR stripos_clone($queryString,'/*') OR stripos_clone($queryString,'*/union/*') OR stripos_clone($queryString,'c2nyaxb0')) {


//header("Location: index.php");


//die();


//}

My code says:

Code:

if(!file_exists('includes/nukesentinel.php')) {


  if(isset($_SERVER['QUERY_STRING']) && (!stripos_clone($_SERVER['QUERY_STRING'], "ad_click") || !stripos_clone($_SERVER['QUERY_STRING'], "url"))) {


    $queryString = $_SERVER['QUERY_STRING'];


    if (stripos_clone($queryString,'%20union%20') OR stripos_clone($queryString,'/*') OR stripos_clone($queryString,'*/union/*') OR stripos_clone($queryString,'c2nyaxb0') OR stripos_clone($queryString,'+union+') OR stripos_clone($queryString,'http://') OR (stripos_clone($queryString,'cmd=') AND !stripos_clone($queryString,'&cmd')) OR (stripos_clone($queryString,'exec') AND !stripos_clone($queryString,'execu')) OR stripos_clone($queryString,'concat')) {


      die('Illegal Operation');


    }


  }


}

Same question; still comment it out?

Sells PC To Pay For Divorce Joined: Posts: 5661

what nuke version do you use ?

Posted: Wed Aug 03, 2005 3:31 pm

hitwalker wrote:

what nuke version do you use ?

7.7 with the latest 3.1 patch.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Comment it all out.

Posted: Wed Aug 03, 2005 3:46 pm

Raven wrote:

Comment it all out.

Done and done. Thanks.