boardom Forum Index boardom
b2 message board
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

HELP..hacking issue
Goto page 1, 2  Next
 
Post new topic   Reply to topic    boardom Forum Index -> Installation issues
View previous topic :: View next topic  
Author Message
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Tue Nov 23, 2004 1:12 pm    Post subject: HELP..hacking issue Reply with quote

Has anyone ever gotten this when they went to their b2 page?


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY></BODY></HTML>


I've been having a problem with someone coming to my site and hacking my b2. Now I've deleted the gm-b2.php and blogger-b2.php files, yet he's still doing this. And I've also banned his IP address. He's using AOL so he just sign off and sign back on and do it all over again.
Back to top
View user's profile Send private message
Sigg3



Joined: 03 Jul 2003
Posts: 898
Location: Oslo, Norway

PostPosted: Tue Nov 23, 2004 2:28 pm    Post subject: Reply with quote

I suspect you've chmodded index.php 777 instead of 776. Is that right?
It should be 776 if not 644.

Here's the entire Security fix, btw: http://www.sigg3.net/cafelog/files/b2_sec_fix.txt
_________________
Sigg3.net - You know you're worth it! | b2 Cafelog Resource Center | Fight my BattleImp!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Tue Nov 23, 2004 9:21 pm    Post subject: Reply with quote

thanks soo much. I finally feel alot better. I was about go on an indefinite hiatus..saddest part is that this kid is like 12.
Back to top
View user's profile Send private message
Sigg3



Joined: 03 Jul 2003
Posts: 898
Location: Oslo, Norway

PostPosted: Tue Nov 23, 2004 9:28 pm    Post subject: Reply with quote

Hope it works.

I was defaced in a wide sweep involving over 400 pages. Can't take that personally, I suppose:)
_________________
Sigg3.net - You know you're worth it! | b2 Cafelog Resource Center | Fight my BattleImp!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Thu Nov 25, 2004 5:37 pm    Post subject: Reply with quote

Hey Sigg..I finally got around to trynig the security fix this morning and couldn't find the line that it says to change. I've looked and even tried Microsoft Word's text search feature just to make sure. But I can't find this line in the b2functions.php file:

Code:
require_once($b2inc."/lj_update.php");


Is there a specific line number that I should be looking for?
Back to top
View user's profile Send private message
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Thu Nov 25, 2004 6:20 pm    Post subject: Reply with quote

b2functions.php

Last edited by prolific on Sat Nov 27, 2004 1:53 am; edited 1 time in total
Back to top
View user's profile Send private message
Sigg3



Joined: 03 Jul 2003
Posts: 898
Location: Oslo, Norway

PostPosted: Fri Nov 26, 2004 9:19 am    Post subject: Reply with quote

Hmm..

I can't find either of them (the original nor the fix). This fix is for b2 v. 0.6.2.1 and 0.6.2.2. You have some other version?
_________________
Sigg3.net - You know you're worth it! | b2 Cafelog Resource Center | Fight my BattleImp!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Fri Nov 26, 2004 12:00 pm    Post subject: Reply with quote

Sigg3 wrote:
Hmm..

I can't find either of them (the original nor the fix). This fix is for b2 v. 0.6.2.1 and 0.6.2.2. You have some other version?


This is supposedly 0.6.2.2..

I'm going to download the file..and try to find it myself in that. I had this installed from the addon script library in my cpanel. I'll tell ya how it turns out.
Back to top
View user's profile Send private message
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Fri Nov 26, 2004 8:09 pm    Post subject: Reply with quote

Okay so I downloaded the b2 zip file from the cafelog resource center. Well I'm looking through this b2functions.php file and can't seem to find the line in it either.

Last edited by prolific on Sat Nov 27, 2004 1:52 am; edited 1 time in total
Back to top
View user's profile Send private message
Sigg3



Joined: 03 Jul 2003
Posts: 898
Location: Oslo, Norway

PostPosted: Sat Nov 27, 2004 12:23 am    Post subject: Reply with quote

Hmmm

michel v wrote:
In the meanwhile, delete gm-2-b2.php and blogger-2-b2.php or do the following modifications in these files.


The source-file I worked from had those lines... strange.

Your CHMOD permissions are correct? (Stupid question, but..!)

Oh, and you can delete the codes above now:)
_________________
Sigg3.net - You know you're worth it! | b2 Cafelog Resource Center | Fight my BattleImp!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Sat Nov 27, 2004 1:55 am    Post subject: Reply with quote

Sigg3 wrote:
Hmmm

michel v wrote:
In the meanwhile, delete gm-2-b2.php and blogger-2-b2.php or do the following modifications in these files.


The source-file I worked from had those lines... strange.

Your CHMOD permissions are correct? (Stupid question, but..!)

Oh, and you can delete the codes above now:)



I've deleted them for myself and all my hostees. But the problem still remains that when I install the blacklist and the view all comments, b2 becomes a blank page with this:


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY></BODY></HTML>


as the source code.

Not a stupid question..cuz I'm absolutely clueless as to what that is lol.
Back to top
View user's profile Send private message
Sigg3



Joined: 03 Jul 2003
Posts: 898
Location: Oslo, Norway

PostPosted: Sat Nov 27, 2004 7:37 pm    Post subject: Reply with quote

If your CHMOD permissions are 777, this is an apparent security flaw.
If it's 766, you should be ok.

Anywho, PM Michael (Cyberian75) who made the script:)
_________________
Sigg3.net - You know you're worth it! | b2 Cafelog Resource Center | Fight my BattleImp!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
Cyberian75



Joined: 26 Sep 2002
Posts: 1283
Location: Oregon

PostPosted: Sat Nov 27, 2004 8:36 pm    Post subject: Reply with quote

Looks like a FTP problem again.
_________________
Michael P.

Back to top
View user's profile Send private message AIM Address
prolific



Joined: 28 Sep 2004
Posts: 29

PostPosted: Sun Nov 28, 2004 11:29 am    Post subject: Reply with quote

Cyberian75 wrote:
Looks like a FTP problem again.


I tried uploading it on auto and on binary, but that still happens. I guess it must have something to do with the security update. Neither Sigg, nor myself can find the line that's supposed to be changed in my b2functions.php file. I've emailed my host, and hopefully she'll be able to point me in the right direction. I'll let you know how it turns out.
Back to top
View user's profile Send private message
Sigg3



Joined: 03 Jul 2003
Posts: 898
Location: Oslo, Norway

PostPosted: Mon Nov 29, 2004 8:58 am    Post subject: Reply with quote

C75, you know anything about such differences among versions?
.... I just had a dreary thought; b2's included in people's server-webware may have _their own_ versions...
_________________
Sigg3.net - You know you're worth it! | b2 Cafelog Resource Center | Fight my BattleImp!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    boardom Forum Index -> Installation issues All times are GMT + 1 Hour
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2 © 2001, 2002 phpBB Group