Possible Santy Worm Attack!

Posted: Mon Mar 07, 2005 7:09 pm

when I want to see the unanswered messges, I choose one, the message doesn`t appear and it says to me t hie: Possible Santy Worm Attack!, I would like to know how to repair that.
I´m using NukeSentinel™ 2.2.0, PHP Nuke 7.6 parch 2.9 and BBtoNuke 2.0.13

thanks

New Member Joined: Mar 07, 2005 Posts: 10

I have the same problem.

New Member Joined: Feb 01, 2005 Posts: 15

I'm getting the same thing. Is this a warning from sentinel 2.2.0?

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Comment out that logic in sentinel.php and/or nukesentinel.php.

Posted: Mon Mar 21, 2005 12:48 am

Thanks Raven.

I think this may have something to do with it? This is from includes/nukesentinel.php

Code:




// Stop Santy Worm


// If you have problems with forums remove ,highlight from the string below


if($ab_config['santy_protection'] == 1) {


  $bad_uri_content=array("rush","highlight","perl","chr(","pillar","visualcoder","sess_");


  while(list($stid,$uri_content)=each($bad_uri_content)) { if(stristr($_SERVER['REQUEST_URI'], $uri_content)) { die(_AB_SANTY); } }


}

Guess I can try removing "highlight".

Update: Removing "highlight" seems to have fixed my problem.

Posted: Mon Mar 21, 2005 9:41 am

Exactly what I was referring to Smile

New Member Joined: Mar 27, 2005 Posts: 1

Out of the many that use our forums, why would only 2 people be affected by this? I'm not a coder, so can you tell me what "highlight" removal is doing? Does it decrease the protection? Sorry for the noobish ?'s.

New Member Joined: May 18, 2005 Posts: 2

my web site at www.utcommerce.com seems to have a problem with highlight.

when a user searches something (ie 'macro') and they click on the link, it returns a blank page. But when you delete 'highlight' in the url, the link works perfectly.

My question is: how do i delete the highlight wording when the user searches?

thank you.

Posted: Wed May 18, 2005 8:58 pm

spb wrote:

Well I have fixed it, but is this the right thing to do

search.php

Changed

Code:

$topic_url = append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . '=' . $searchset[$i]['topic_id'] . "&amp;highlight=$highlight_active");

to

Code:




$topic_url = append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . '=' . $searchset[$i]['topic_id']);

As I say it works, but will it cause me problems in future?

Posted: Wed May 18, 2005 9:11 pm

See this article http://www.nukefixes.com/ftopicp-4633.html#4633

New Member Joined: Feb 05, 2005 Posts: 1

um, none of the options above work for me, i have the Possible Santy Worm Attack page when I click on 1 member's Find All Posts by in their forum profile ...

ok - i turned off Santy worm protection in sentinel admin, and am going t0 try the .htaccess script

but all i get now is a blank page for every member's posts search .. lol

Alright! I reversed the above changes and went with this post's reco about using the .htaccess script and turning off sentinel's santy worm protection -

http://www.ravenphpscripts.com/postt4989.html

all members' profiles' posts search now work, including the original afflicted one!

////