1
jdseymour
Problem with Protector

Hello All,

My XOOPS 3.4 upgrade whent quite smoothly. All seems to be working properly except one problem I found with protector module. When I access the security advisory tab I get:

le="color: #000000"><?php Fatal error: Class 'XoopsDatabaseFactory' not found in /home/xxxx/xxxx/xxxx/public_html/class/database/database.php on line 127


Also inline debug mode shows 69 errors (well warnings) most to do with protector. I redownloaded and uploaded to make sure all files were good.

My server is:

Apache 2.2
php 5.2.10
mysql 5.0.81
CentOS 5.4

2
Burning
Re: Problem with Protector
  • 2009/11/2 22:47

  • Burning

  • Theme Designer

  • Posts: 1163

  • Since: 2006/8/22


hi'

Related informations are available on GiJoe website :
Quote:
= NEW FEATURE SINCE 3.3: DBLayer trapping anti-SQL-Injection

This feature can beat almost malicious SQL Injection attacks if you uses some modules vulnerable to "SQL Injection".

However, you have to patch a file "class/database/databasefactory.php" to enable the feature.

I prepared patches/ folder, and it contains patched databasefactory.php for each cores.


Hope it helps

3
jdseymour
Re: Problem with Protector

Thanks Burning,

Perhaps, since this module is included with the core, the patch should be included also.

4
trabis
Re: Problem with Protector
  • 2009/11/2 22:55

  • trabis

  • Core Developer

  • Posts: 2269

  • Since: 2006/9/1 1


And it is. Please make sure you have installed protector that comes with core in both public and private folders(xoops_lib)

5
jdseymour
Re: Problem with Protector

That is what I have installed, but I still have this error.

Should I uninstall it and reinstall?

6
trabis
Re: Problem with Protector
  • 2009/11/3 0:00

  • trabis

  • Core Developer

  • Posts: 2269

  • Since: 2006/9/1 1


Humm, I remember having that problem in one of my upgrades.
I went to class/database and delete everything in there. I remember there was old files there from the 2.4 alpha version(with other databases support and a folder 'drivers' that may have been from other cms, eheh)
Please delete everything in that folder and make sure only the files that come with 2.4.0 final are there.

7
jdseymour
Re: Problem with Protector

Thanks Trabis,

I just deleted everything in the class/database folder. I still have the same error (blank page with the fatal error). I am using files from the 2.4 tar.gz archive - if that helps.

Any other ideas? The rest of protector works fine, this is just on the security advisory tab.

8
trabis
Re: Problem with Protector
  • 2009/11/3 0:33

  • trabis

  • Core Developer

  • Posts: 2269

  • Since: 2006/9/1 1


Just one!

Delete protector hooks from mainfile.php ;)


This:
include XOOPS_TRUST_PATH.'/modules/protector/include/precheck.inc.php';

and this:
include XOOPS_TRUST_PATH.'/modules/protector/include/postcheck.inc.php';

9
jdseymour
Re: Problem with Protector

Trabis, your great. That fixed it. Did I miss that documented somewhere?

10
trabis
Re: Problem with Protector
  • 2009/11/3 0:54

  • trabis

  • Core Developer

  • Posts: 2269

  • Since: 2006/9/1 1


I guess it is not documented. We are missing the upgrade from 2.3.0 instructions. Hope we can add them for next release.