Support Forums - All Posts - XOOPS Web Application System

Forum Index

Board index » All Posts (supernix)

Bottom

« 1 ... 8 9 10 (11) 12 »

101

Private Forums

2003/10/15 22:46
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Hello,

I need to know how I can fix a problem I am having.

I have some private forums and I enabled the show recent private private topics.

But anyone and everyone can see the private topics. They can't actually access the private forums. But I don't want them to see the topics either just those that are part of those forums.

Any help will be greatly appreciated.

Topic | Forum

102

Edit info & Last login

2003/10/11 6:52
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Hello,

I have another user that is having problems with XOOPS 2.05
He has activated his account and all and even logged in.
But he can't modify his user profile for some reason.

Another strange thing I noticed is that it does not show what time he last logged in and the date and such on his profile.

I know he logged in though. I saw him listed in the Who is on block.

Topic | Forum

103

Re: Spanish Language for XOOPS

2003/10/11 5:26
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

I have a user that is Spanish speaking and I thought about installing the language pack to help him.

How do I do that ? And will that link provide me with the files I need ?

I am running 2.05

Topic | Forum

104

Re: Trouble Registering

2003/10/10 20:01
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Thanks for the prompt response and the link you provided that will be very helpful I am sure.

As best I can tell they attempted to register but it did not go through I do not even see them listed in the inactive users section.

Topic | Forum

105

Trouble Registering

2003/10/10 19:07
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Hello could someone please help me.

There are some people writing me saying that they were not able to register.
They have verified that the userid and pass met the minimum requirements.

Here is what someone said :

I went to the page, clicked 'register now,' filled in username,
email, website, time zone, password and agreed to disclaimer. Then I
clicked 'Submit.' Then a page came up listing the username, email,
website, and time zone I had entered with a button below it that
said 'Finish.' I clicked 'Finish,' and a new page came up with a
message that said "Could not register new user."

I have tried this process about four times with no result.

====================================

I am currently using 2.05 stable and just upgraded it yesterday.

Topic | Forum

106

Word filtering

2003/10/9 21:04
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Hello I was curious about word filtering.
I know you can add words that you would like to be filtered out from the site as a user adds them.

But I was curious if I could also make it so that anyone that posts to a forum the post is moderated and has to be approved first ?

Topic | Forum

107

Re: Possible PHPMyAdmin risk

2003/5/29 4:21
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Definately a good idea. Had I thought about that I would not had reason for posting this thread. I think everyone should use your suggested security measure that use the 4mps phpmyadmin 240-rc1 module.

I posted that I had removed the module but you would be suprised how many people still tried to use that URL. I am curious if anyone else ran that similar URL on their domain using the same module?

Steve,
http://www.dnspad.com/

Topic | Forum

108

Re: Possible PHPMyAdmin risk

2003/5/29 3:08
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

That is pretty much what I did.
I was not exactly sure if that was definately
a security breach. But it sure looked like one when I followed that url to the backend of the database.

Topic | Forum

109

Re: Possible PHPMyAdmin risk

2003/5/28 14:18
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

Completely sure it was not my IP.

Topic | Forum

110

Possible PHPMyAdmin risk

2003/5/28 9:41
supernix
Not too shy to talk
Posts: 151
Since: 2003/3/13

This morning going over the logs I found this
Host: 203.217.41.124 Url: /modules/phpmyadmin/admin/sql.php?lang=en-iso-8859-1&server=1&db=supernix_xoops&table=xoops_config&goto=tbl_properties.php&back=tbl_properties.php&sql_query=SELECT+%2A+FROM+%60xoops_config%60&pos=0&PHPSESSID=aed13a2e3e593f9d7c893a483bf3481e Http Code : 200
Date: May 28 03:15:17 Http Version: HTTP/1.1 Size in Bytes: 244435
Referer:http://www.dnspad.com/modules/phpmyadmin/admin/sql.php?lang=en-iso-8859-1&server=1&db=supernix_xoops&table=xoops_config&goto=tbl_properties_structure.php&back=tbl_properties_structure.php&sql_query=SELECT+%2A+FROM+%60xoops_config%60&pos=0&PHPSESSID=aed13a2e3e593f9d7c893a483bf3481e Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; YComp 5.0.0.0; .NET CLR 1.0.3705)

and when I went to that URL it showed the PHPMyadmin and the table with options to manipulate the tables and such.

And shortly before that I found this :
Host: 210.50.219.22 Url: /modules/phpmyadmin/admin/index.php Http Code : 200
Date: May 28 03:13:41 Http Version: HTTP/1.1 Size in Bytes: 642
Referer: - Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

So I dont know if it is a problem with XOOPS or the PHPMyadmin module or Xoops

I have taken the PHPMyadmin module completely off the server to avoid any further cause for concern. But it sorta looks like to me that someone found a way to use the PHPMyadmin module to get access to the database.

Steve,
http://www.dnspad.com/

Topic | Forum

Top

« 1 ... 8 9 10 (11) 12 »

Stats
Goal:	$100.00
Due Date:	May 31
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Forum Index

Private Forums

Edit info & Last login

Re: Spanish Language for XOOPS

Re: Trouble Registering

Trouble Registering

Word filtering

Re: Possible PHPMyAdmin risk

Re: Possible PHPMyAdmin risk

Re: Possible PHPMyAdmin risk

Possible PHPMyAdmin risk

Login

Search

Recent Posts

Re: Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Re: NewBB v 5.1.0 b 6

Re: NewBB v 5.1.0 b 6

NewBB v 5.1.0 b 6

Re: XOOPS 2.5.11 search user is not working

Re: oledrion

Re: oledrion

Re: oledrion

Re: oledrion

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}