sentinel and osc2nuke not getting along

New Member Joined: Mar 05, 2006 Posts: 16

Hi,

I get this error with sentinel and osc2nuke universal module 1.1:

Code:




Fatal error: Unknown(): The script tried to execute a method or access a property of an incomplete object. Please ensure that the class definition <b>navigationhistory</b> of the object you are trying to operate on was loaded _before_ the session was started in /home/admin/domains/yourdomain.com/public_html/nuke/modules/catalog/includes/application_top.php on line 323

If I comment out the sentinel code on top of mainfile.php, it works fine. Or if I comment out session_start(); or put it under

Code:




if (defined('FORUM_ADMIN')) {


  @require_once("../../../config.php");


  @require_once("../../../db/db.php");


  @require_once("../../../modules/catalog/includes/application_top.php");    


  $lang_dir = "../../../";


} elseif (defined('INSIDE_MOD')) {


  @require_once("../../config.php");


  @require_once("../../db/db.php");


  //@require_once("../../admin/modules/oscnuke/init.php");


  //@require_once("../../modules/catalog/includes/application_top.php");


  $lang_dir = "../../";


} else {


  @require_once("config.php");


  @require_once("db/db.php");


  //@require_once("modules/catalog/includes/application_top.php");


  //@require_once("admin/modules/oscnuke/init.php");


  $lang_dir = "";


}

in includes/nukesentinel.php, it works fine. Any suggestions?

Another problem I ran into was the sticky regarding osc2nuke and sentinel. First, it says "include/sentinel.php". I guess that's supposed to be nukesentinel.php. And second this block:

Code:




// Load required scripts 


if ($forum_admin == 1) { 


    require_once("../../../config.php"); 


    require_once("../../../db/db.php"); 


    require_once("../../../includes/application_top.php");    


    $lang_dir = "../../../"; 


} elseif ($inside_mod == 1) { 


    require_once("../../config.php"); 


    require_once("../../db/db.php"); 


    require_once("../../admin/modules/oscnuke/init.php");    $lang_dir = "../../"; 


} else { 


    require_once("config.php"); 


    require_once("db/db.php"); 


    require_once("admin/modules/oscnuke/init.php");    


    $lang_dir = ""; 


}

I couldn't find anything called /oscnuke/init.php. I'm not trying to come across nit picky, I'm just trying to get this right (those differences I mentioned may be older versions). BTW, thanks to the admins for their previous help Very Happy

Satch

registered · Posted: Sun Apr 09, 2006 7:33 am

<bump>

Posted: Sun Apr 09, 2006 8:52 am

I am not sure that Sentinel was designed to run with eiwther osc or osc universal.
The refereence in your post to either sentinel.php and nukesentinel.php - both are correct but would be dependant on the version of Sentinel you are using as some files were renamed in more recent versions.

Posted: Sun Apr 09, 2006 6:56 pm

Well the problem seems to be with the session_start(); on line 21 in nukesentinel.php. If I comment it out or put it under

Code:




// Load required scripts 


if (defined('FORUM_ADMIN')) {    


  require_once("../../../config.php"); 


  require_once("../../../db/db.php"); 


  $lang_dir = "../../../"; 


} elseif (defined('INSIDE_MOD')) { 


  require_once("../../config.php"); 


  require_once("../../db/db.php"); 


  //osc2nuke changes to include application_top 


  require_once("../../modules/catalog/includes/application_top.php"); 


  //osc2nuke changes to include additional function 


  require_once("../../includes/functions_osc.php"); 


  $lang_dir = "../../";   


} else { 


  require_once("config.php"); 


  require_once("db/db.php"); 


  //osc2nuke changes to include application_top 


  require_once("modules/catalog/includes/application_top.php"); 


  //osc2nuke changes to include additional function 


  require_once("includes/functions_osc.php"); 


  $lang_dir = "";   


}

osc2nuke will work fine. If it's under that block I can still ban as I've tested it with http://yourdomain.com/modules.php?name=Your_Account&/**/union/**/. Am I opening up vulnerabilities if I do that?

Thanks,

Satch