https://www.icyphoenix.com/viewtopic.php?f=35&t=6484
-----------------------------------
spydie
Sat 19 Sep, 2009 21:03

[BUG] CRTracker Message On Adding Checkboxes To Profile
-----------------------------------
Hi

Don´t understand why i´m getting an Hacking attempt message , after adding custom field´s to Profile.

The message is the tipical :

[color=#ff0000]SECURITY ALERT » » » »
CBACK CrackerTracker has detected a potential attack on this site with a worm or exploit script so the Security System stopped the script.


If you can see this page after including a new MOD into your board or after clicking on a link please contact the Board Administrator with this error message and a description what you have done before you could see this page, that the Admin has the possibility to fix the problem. 
[/color]
No idea why:

Just added a few Radio buttons, checkboxes and a textbox.

The only way to edit existing profiles is through ACP now. All tries to reg a new fake user been useless, the same message apears and the acount is not created.



Edit: 

I just found out that this issue only is related to checkboxes. If  i delete that checkboxes the CrTracker message disapears and all other field´s work without problems.

Can someone confirm this please, so we can post it as possible BUG


-----------------------------------
Lopalong
Wed 23 Sep, 2009 13:24

Re: CRTracker Message After Adding Field´s To Profile
-----------------------------------
Check the Ctracker logs in the ACP to see what .php file it's blocking - Then add this to it anywhere on a new line after the <?php

It's more than likely profile.php

[code linenumbers=false]define('MG_KILL_CTRACK', true);[/code]


-----------------------------------
spydie
Wed 23 Sep, 2009 15:21

Re: CRTracker Message After Adding Field´s To Profile
-----------------------------------
Thank´s Lopa

That worked.

But it keep´s being a Bug in Icy.

Because since this mode is included in the script, it should work without any problem.

CRTracker should´nt block the script because of an in the basic install inluded mode


-----------------------------------
Lopalong
Thu 24 Sep, 2009 01:03

Re: CRTracker Message After Adding Field´s To Profile
-----------------------------------
CTracker imho my friend can sometimes be more of a pain than a help. :(

But I do believe that it's a necessary evil that we have to allow for and do a work around. ;)

I've also got another one that I'm going to post as a bug - Maybe you would like to test and confirm it.  8)


-----------------------------------
Mighty Gorgon
Wed 21 Oct, 2009 19:38

Re: [BUG] CRTracker Message On Adding Checkboxes To Profile
-----------------------------------
CTracker POST and GET checkin is performed before any inclusion, so there is no easy way to allow Custom Profile Fields to be included automatically.

You have only to manually edit CTracker settings or add the switch to disable it.

If I move that check after some inclusions then we will miss the purpose of having it.


