1
dwhitten
Re: Problems with CBB2.3 and Xoops 2.0.16
  • 2007/3/9 19:07

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


I have a backup of my forum tables. The tables for cbb 3.08 were different. In order to get the data to insert, I added dummy fields as a couple tables had less fields than the old tables.

So I managed to get all the data inserted into the database, the topics and post counts come out ok, but none of the post texts come out. All the posts are blank.

So - how do I convert the database from newbb 2.3 to cbb 3.08? I blew away my tables when I installed the latest version. I could go back to the original tables as I do have a backup...

But if I go back to 2.3 how do I upgrade to 3.08?

Help.

Thanks,
Deb



2
dwhitten
Problems with CBB2.3 and Xoops 2.0.16
  • 2007/3/9 14:25

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Hello,

I just upgraded to XOOPS 2.0.16 and can't install/run CBB2.3.

I have PHP 4.4.4, MySQL 4.0.27-standard

The errors I get when installing CBB are:

Fatal error: Class newbbposthandler: Cannot inherit from undefined class xoopspersistableobjecthandler in /home/horse/public_html/showez/modules/newbb/class/post.php on line 515
All errors (4) queries (254) blocks (0) extra (1) timers (3)
Errors
Notice: Only variables should be assigned by reference in file /modules/system/admin/modulesadmin/modulesadmin.php line 417
Notice: Only variables should be assigned by reference in file /kernel/object.php line 500
Notice: Only variables should be assigned by reference in file /modules/newbb/class/permission.php line 178
Notice: Only variable references should be returned by reference in file /modules/newbb/class/permission.php line 227

Can anyone help or suggest another version of cbb that will work with XOOPS 2.0?

Thanks,
Deb



3
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 23:11

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Thanks to protector, that I didn't think was very useful... I found a suspicious IP. I then grepped through my log file and voila:

81.215.110.79 - - [22/Aug/2006:12:52:17 -0400] "GET /showez/modules/myAd s/annonces-p-f.php?op=ImprAnn&lid=-1+union+select+1,pass,uid,uname,5,6,7 ,8,9,10,11,12,13+from+xoops_users+limit+1/* HTTP/1.1" 200 1164 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6"

81.215.110.79 - - [22/Aug/2006:12:52:17 -0400] "GET /showez/themes/neoblue/style/style.css HTTP/1.1" 404 - "http://www.horseshowsrus.ca/showez/m odules/myAds/annonces-p-f.php?op=ImprAnn&lid=-1+union+select+1,pass,uid, uname,5,6,7,8,9,10,11,12,13+from+xoops_users+limit+1/*" "Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6"

(I figured out where the ip bans were and got back into my XOOPS admin!)

I banned this IP. I have uninstalled myads.

This is a good lesson in sql injection!!!!

Thanks everyone for the help.

Deb
*/



4
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 23:03

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Ok, I think I banned my own IP out of accessing the site!

How do I get back in? I put a list of banned IP's into protector. I guess I could edit the db table...

Do you think they logged in through myads or did they actually login as the admin?

Deb



5
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 22:46

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Hmmm, looks like they might have logged in:

85.103.231.97 - - [20/Aug/2006:07:33:48 -0400] "GET /showez/modules/myAds/myAds.jpg HTTP/1.1" 200 2990 "http://www.horseshowsrus.ca/showez/modul es/system/admin.php?fct=preferences" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6"

Ok, password change coming up...



6
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 22:03

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Modules installed:

myads - I edited all sql statements.
myalbum 2.84
newbb 3.04 (I believe this is cbb)
pical 0.76 (I customized it)
protector 2.57 - just installed a day or so ago
smartfaq 1.04
smartsection 1.05
xdirectory 1.10

Any ideas?

Deb



7
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 21:48

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


I'm going to try looking at the MySQL logs and a few other things. Will report back...

Deb



8
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 20:26

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Make that 6 times.



9
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 20:25

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


So now is the 5th time. I've installed protector and upgraded xoops. I don't have time at the moment to notify the web host or look at the MySQL logs, but I will later.

God this is tiring.

Deb



10
dwhitten
Re: Hacked twice today - help.
  • 2006/8/22 12:56

  • dwhitten

  • Just popping in

  • Posts: 54

  • Since: 2005/6/22


Thanks for the suggestions.

After the third time, I went through the myads code and put mysql_real_escape_string around every parameter involved in a database query. That seemed to have worked for 2 days.

Now today - hacked again for the 4th time.

I've just upgraded to XOOPS 2.0.14. I followed the directions herehttp://devteam.xoops.org/releases/xoops-2.0.14.html for the upgrade, but it said no upgrade was necessary. I guess copying over the htdocs files was all that was necessary?

Everything seems to work and the site is back on. Now I wait to see if I'll be hacked yet again. This is getting boring and I don't have time to go through every XOOPS module to check for holes. I'm now worried about my other sites which shall remain nameless...

Anything else I should do for next time? If there is a next time?

Deb




TopTop
(1) 2 3 4 ... 6 »



Login

Who's Online

175 user(s) are online (111 user(s) are browsing Support Forums)


Members: 0


Guests: 175


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits