Home arrow Forum hacking attempt
  Welcome, Guest. Please login or register.
Did you miss your activation email?
January 09, 2009, 05:01:46 AM
Home New Posts Search Calendar


Login with username, password and session length
+  Joomla Forum
|-+  Joomla Hacks
| |-+  Joomla-SMF Forum Support
| | |-+  Joomla-SMF 1.1.x (Moderators: -Wolverine, kai920)
| | | |-+  hacking attempt
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: hacking attempt  (Read 1920 times)
Tony Leighton
Joomla Newbie
*

Karma: +0/-0
Offline Offline

Posts: 3


View Profile
hacking attempt
« on: February 25, 2006, 08:48:20 PM »

Ive installed SMF1.1RC2 with JoomlaSMF 1.1RC1.  Everything seemed to install alright and the forum comes up.  However when in the admin panel or trying to install new boards i receive a hack attempt error and can go no further.  does anyone have any ideas on this problem.  Running joomla 1.0.7 on apache server.

Also does JACLplus having any effect on the forum installtion as I have a number of user group defined.
Logged
Kevin8020
QA / Testers
Joomla Master
*****

Karma: +33/-18
Offline Offline

Posts: 105



View Profile WWW
Re: hacking attempt
« Reply #1 on: February 25, 2006, 09:19:01 PM »

Just this one, which could be your problem:

If anyone is using the JACLPlus component with this bridge, there is a change that you will be required to make to use Joomla's user menu.

In technical terms, the bridge previously used the Joomla login cookie maker (if you will) to set the cookie. In the new version, it uses its own cookie creator. JACLPlus adds a few lines to that cookie that are not included in the SMF version.

Here is the fix:
  • functions.smf.php
  • Previous Codeblock - Line 1100 to 1116
Code:
// fudge the group stuff
        $grp = $acl->getAroGroup( $row->id );
        $row->gid = 1;

        if ($acl->is_group_child_of( $grp->name, 'Registered', 'ARO' ) ||
        $acl->is_group_child_of( $grp->name, 'Public Backend', 'ARO' )) {
            // fudge Authors, Editors, Publishers and Super Administrators into the Special Group
            $row->gid = 2;
        }
        $row->usertype = $grp->name;

        $session =& $mainframe->_session;
        $session->guest         = 0;
        $session->username         = $username;
        $session->userid         = intval( $row->id );
        $session->usertype         = $row->usertype;
        $session->gid             = intval( $row->gid );
  • New codeblock
Code:
        // fudge the group stuff
        $grp = $acl->getAroGroup( $row->id );
        //$row->gid = 1;
        $row->gid = $grp->group_id;

        /* if ($acl->is_group_child_of( $grp->name, 'Registered', 'ARO' ) ||
        $acl->is_group_child_of( $grp->name, 'Public Backend', 'ARO' )) {
            // fudge Authors, Editors, Publishers and Super Administrators into the Special Group
            $row->gid = 2;
        } */
        $row->usertype = $grp->name;

        $session =& $mainframe->_session;
        $session->guest         = 0;
        $session->username         = $username;
        $session->userid         = intval( $row->id );
        $session->usertype         = $row->usertype;
        $session->gid             = intval( $row->gid );
        $session->jaclplus        = $grp->jaclplus;

    I'll contact the author of JACLPlus to have him prepare to fix this.

    -Kevin8020
    « Last Edit: February 25, 2006, 09:22:50 PM by Kevin8020 » Logged
    Tony Leighton
    Joomla Newbie
    *

    Karma: +0/-0
    Offline Offline

    Posts: 3


    View Profile
    Re: hacking attempt
    « Reply #2 on: February 25, 2006, 09:32:55 PM »

    Thankyou I'll give that a try
    Logged
    Tony Leighton
    Joomla Newbie
    *

    Karma: +0/-0
    Offline Offline

    Posts: 3


    View Profile
    Re: hacking attempt
    « Reply #3 on: February 25, 2006, 09:43:17 PM »

    Can't seem to find functions.smf.php in any of the folders.  Is there a reason why it wouldn't have installed.
    Logged
    p9939068
    Joomla Expert
    ****

    Karma: +18/-5
    Offline Offline

    Posts: 173


    View Profile WWW
    Re: hacking attempt
    « Reply #4 on: February 26, 2006, 03:54:10 PM »

    it's inside administrator/components/com_smf
    Logged

    -----
    Owner of http://mike.simbunch.com
    Creator of ParaInvite, AJAX Sandbox, AJAX SMF Polls, Profile URL etc..
    Pages: [1] Go Up Print 
    « previous next »
    Jump to:  



    Login with username, password and session length

    Powered by MySQL Powered by PHP Joomla Forum | Powered by SMF 1.1 RC1.
    © 2001-2005, Lewis Media. All Rights Reserved.
    Joomla Bridge by JoomlaHacks.com
    Valid XHTML 1.0! Valid CSS!

    Joomla Hacks is a Joomla Components, Joomla Modules, Joomla Templates, & Joomla Mambots resource portal. None of the text or images in this public website may be copied without the expressed written consent of the authors. Copyright 2005 by JoomlaHacks.com. Powered by Joomla. All rights reserved.
    Terms of Use
    Joomla Hacks



    Joomla Hacks
    German Lang French Lang Italian Lang Spanish Lang Japanese Lang Chinese Lang
    Search Contact About Advertise Blogs Topsites Submit News Register Login