Need some Help HTTP_REFERRER issues with Seninel I think

New Member Joined: Jul 11, 2005 Posts: 10

Have an issue seems that Sentinel is a bit agressive. Wondering I can get some advise

I have a user and potential sponser / Mutual Supporter (IMPORTANT) that is getting the following when loggin onto my system

Warning: your browser doesn't send the HTTP_REFERER header to the website.
This can be caused due to your browser, using a proxy server or your firewall.
Please change browser or turn off the use of a proxy
or turn off the 'Deny servers to trace web browsing' in your firewall
and you shouldn't have problems when sending a POST on this website.

I noticed that this is occureing on all three of my sites runing Sentinal 2.4.2

My question is how do I set or should I set the Exclusion list i Sentinel or any advise is greatful.

www.motofamilynews.com is one
www.coore.org is another
www.onenationcafe.com is the third

Posted: Tue Nov 08, 2005 11:55 am

It seems there are several possibilities here.
You may have excluded the use of 'POST via your configuration area.
You may have 'deny proxies' activated in the config area.
OR, there company firewall is blocking your site, though for all your sites to be blocked would be unusual.

Provided you do not have proxy blocking turned on, you might find that adding their IP to the 'protected range' may help.

Posted: Tue Nov 08, 2005 12:29 pm

Guardian2003 wrote:

It seems there are several possibilities here.
You may have excluded the use of 'POST via your configuration area.
You may have 'deny proxies' activated in the config area.
OR, there company firewall is blocking your site, though for all your sites to be blocked would be unusual.

Provided you do not have proxy blocking turned on, you might find that adding their IP to the 'protected range' may help.

I got an asnwer I understand this path of code don't work

// Posting from other servers in not allowed
// Fix by Quake
// Bug found by PeNdEjO
if ($_SERVER['REQUEST_METHOD'] == "POST") {
if (isset($_SERVER['HTTP_REFERER'])) {
if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) {
die('Posting from another server not allowed!');
}
} else {
die($posttags);
}
}

Posted: Tue Nov 08, 2005 11:15 pm

I have a user with the same problem. I'm having him either check his firewall or I'll protect his IP. Question

Regular Joined: Oct 17, 2005 Posts: 51

no its that code he just posted you have to delete it or comment it out. I didnt have probs with this til arcade but once I deleted it, it was fixed

Posted: Fri Nov 11, 2005 6:07 am

Is this one if mainfile or index.php?

registered · Posted: Fri Nov 11, 2005 8:29 am

Dacubz wrote:

Is this one if mainfile or index.php?

This block of code is in mainfile.php and it is in the NukeSentinel instructions to comment this code out once Sentinel is installed. It doesn't work anyways from what I have been told.

Posted: Fri Nov 11, 2005 12:07 pm

I dont think thats in nukesentinel instrtuctions as that is just found in the patched series

Posted: Fri Nov 11, 2005 7:51 pm

j_felosi wrote:

I dont think thats in nukesentinel instrtuctions as that is just found in the patched series

I had to take a look again, as I was going from memory, and you are absolutely correct, this bit of code is not mentioned to remove as a part of the Sentinel install. My appologies. Getting too old to go off of memory alone.

Embarassed

Posted: Fri Nov 11, 2005 8:07 pm

Yeah I was just pointing that out, I didnt find it out til after I installed an arcade, I never had problems with it before. Now after submitting score I get: no game specified error, and when you submit comments I get: Error authenticating user, Possible Hack Attempt!
It may be something related to the patch, would you know anything about that montego?

Posted: Fri Nov 11, 2005 8:28 pm

Unfortunately, in my installations of 7.5 patched 3.1, I cannot find this literal error message anywhere. So, I am not sure where it is coming from. I would look for that message text within all your nuke installation's files and trace it back to which script is using the literal define OR has this hard-coded in it. Since I don't see this error message around the code mentioned above, it must be either coincidence or a dependency that I am not familiar with.

Sorry.

Posted: Fri Nov 11, 2005 9:00 pm

Arcade module. Its been a pain in the butt..lol What I belive is what I done wrong is installing the ported version I downloaded from nukecode. So it looks like they may have overported a bit