Icy Phoenix

Old Support Topics - Be Careful With This---it's A Security Warning.

gearhead [ Mon 19 May, 2008 01:56 ]
Post subject: Be Careful With This---it's A Security Warning.

I was almost hacked into. It only happened after I allowed images in posts. (fopen wrappers=on)

Please set the Knowledge Base to not allow posting. I had someone almost hack in.
He was able to (as a user), but was just a guest, write an article.

Just set the permissions to not allow posting to the Knowledge base, and you will be better off.

The user name was a lot of letters and numbers. ctracker kept them out. I have a record of it in the ctracker database.

gearhead [ Tue 20 May, 2008 04:16 ]
Post subject: Re: Be Careful With This---it's A Security Warning.

In my inbox, I had a message from this "anonymous" user. That hacker was a guest and was able to post in the KB.

Of course, when I found out, I disallowed KB articles of any type.

Here is a pic of the message.

When you click to read the article, you get this:

Quote:
Could not obtain category information

DEBUG MODE

SQL Error : 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ORDER BY cat_order ASC' at line 3

SELECT * FROM ip_kb_categories WHERE parent = 0 AND category_id <> ORDER BY cat_order ASC

Line : 1171
File : functions_kb.php

hal9000 [ Tue 20 May, 2008 09:50 ]
Post subject: Re: Be Careful With This---it's A Security Warning.

This is not necessarily a hacker. In my forum I was getting notifications of KB modifications being with the user IP... the Google Bot IP!

I think it's a bug in IP, but it doesn't let a real modification or submission of an article but just generates the notification when it shouldn't do it.

buldo [ Tue 20 May, 2008 22:46 ]
Post subject: Re: Be Careful With This---it's A Security Warning.

hal9000 wrote: [View Post]
I think it's a bug in IP

I don't think so. IMHO it's a permissions issue only: if you don't set permissions correctly then you could get that kind of problems.

hal9000 [ Wed 21 May, 2008 01:03 ]
Post subject: Re: Be Careful With This---it's A Security Warning.

buldo wrote: [View Post]
hal9000 wrote: [View Post]
I think it's a bug in IP

I don't think so. IMHO it's a permissions issue only: if you don't set permissions correctly then you could get that kind of problems.

I'll take a look again, but I think when that happened I already looked at the permission and it was configured to only admins could post or modify. I don't remember well though.