https://www.icyphoenix.com/viewtopic.php?f=35&t=4216
-----------------------------------
gearhead
Mon 19 May, 2008 01:56

Be Careful With This---it's A Security Warning.
-----------------------------------
I was almost hacked into. It only happened after I allowed images in posts. (fopen wrappers=on)

Please set the Knowledge Base to not allow posting. I had someone almost hack in. 
He was able to (as a user), but was just a guest, write an article.

Just set the permissions to not allow posting to the Knowledge base, and you will be better off.

The user name was a lot of letters and numbers. ctracker kept them out. I have a record of it in the ctracker database.

 :mrgreen:


-----------------------------------
gearhead
Tue 20 May, 2008 04:16

Re: Be Careful With This---it's A Security Warning.
-----------------------------------
In my inbox, I had a message from this "anonymous" user. That hacker was a guest and was able to post in the KB.

Of course, when I found out, I disallowed KB articles of any type.

Here is a pic of the message. 

 [img]http://www.icyphoenix.com/files/images/1660/inbox.jpg[/img] 

When you click to read the article, you get this: 

[quote]Could not obtain category information

DEBUG MODE

SQL Error : 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ORDER BY cat_order ASC' at line 3

SELECT * FROM ip_kb_categories WHERE parent = 0 AND category_id <> ORDER BY cat_order ASC

Line : 1171
File : functions_kb.php[/quote]

 :)


-----------------------------------
hal9000
Tue 20 May, 2008 09:50

Re: Be Careful With This---it's A Security Warning.
-----------------------------------
This is not necessarily a hacker. In my forum I was getting notifications of KB modifications being with the user IP... the Google Bot IP!  :shock: 

I think it's a bug in IP, but it doesn't let a real modification or submission of an article but just generates the notification when it shouldn't do it.


-----------------------------------
buldo
Tue 20 May, 2008 22:46

Re: Be Careful With This---it's A Security Warning.
-----------------------------------
[quote user="hal9000" post="28599"]I think it's a bug in IP[/quote]

I don't think so. IMHO it's a permissions issue only: if you don't set permissions correctly then you could get that kind of problems. :wink:


-----------------------------------
hal9000
Wed 21 May, 2008 01:03

Re: Be Careful With This---it's A Security Warning.
-----------------------------------
[quote user="buldo" post="28608"][quote user="hal9000" post="28599"]I think it's a bug in IP[/quote]

I don't think so. IMHO it's a permissions issue only: if you don't set permissions correctly then you could get that kind of problems. :wink:[/quote]

I'll take a look again, but I think when that happened I already looked at the permission and it was configured to only admins could post or modify. I don't remember well though.


