Security fix for php-nuke with phpbb to nuke forums

Martin · **Security fix for php-nuke with phpbb to nuke forums -** 02-04-2003, 11:32 AM

Article from phpnuke.org

Quote:

The security audit of the past attack that shutdown PHPNuke.org web site due to a massive file deletion has a preliminary results. The attack hasn't been made thru Apache but thru PHP-Nuke using a combination of two bugs into the code. I must admit that the cracker is a genius, but got the "cracker" mention instead of "hacker" due to the massive damage he caused. The damage has been solved after 8 hours of hard work. Read more to know who is behind this... While you're reading the article I suggest you to urgently download and install this security fix for PHP-Nuke 6.0.

Mighty_Y · 02-04-2003, 11:39 AM

Does it work with the bbtonuke port??

TuNa · 02-04-2003, 11:44 AM

Do the security fixes overwrite any mods from this site being that I have used quite a few and wouldnt want to start getting errors all of a sudden?
And what Mighty_Y has said.

Martin · 02-04-2003, 11:46 AM

Well obviously if you have added anything to any of those 3 files then you will have to add them to these as well.

Rename them instead or overwritting them so they can be put back or lines copied from them if needed. (or move to a temp folder)

TuNa · 02-04-2003, 11:52 AM

Thnx for the link, I'll go get and install them....I would hate to spend hours working on a site and then see it wiped out like that

TuNa · 02-04-2003, 12:35 PM

I just found that out...Thnx for the heads up m8.

Thank god I back up my file 1st 8)

Mighty_Y · 02-04-2003, 12:41 PM

Thanks Martin,
But who will port this? As it is that important it should be ported as soon as possible.

Mighty_Y

Mighty_Y · 02-04-2003, 01:05 PM

Don't now if Tom's going to do it but I searched on the BBtoNuke website and there is already a thread about this and _I_AM_I_ said there he was going to take a look to it and maybe port the files. Follow the thread here

Mighty_Y

mikem · 02-04-2003, 04:23 PM

This is the security fix for users running Nuke 6.0 with the phpBBport from Tom's. Use this if you are running these ports. Apply this fix IMMEDIATLY!!! You have been warned. Thanks to chatserv at nukeresources

Here's the file
http://www.nukemods.com/modules.php?...t_Security_Fix

ALL files go into your main Nuke directory.

mikem

samson · **.. -** 02-04-2003, 04:51 PM

when i installed the fix that you suplied above my web site says

I don't like you

ops: