>>
Site Map
>>
Forums
>>
PHP-Nuke Security
Forum module - topics in forum:
PHP-Nuke Security - Been hacked? or have a question about securing your site, here's the place.
HTTP_REFERER error
I installed Nuke Sentenal last night on my patched 7.4 setup and a few users are getting this error code when trying to post a reply this message pops up in a white screen.
| Code: : |
Warning: your browser doesn't send the HTTP_REFERER header to the website.
This can be caused due to your browser, using a proxy server or your firewall.
Please change browser or turn off the use of a proxy
or turn off the 'Deny servers to trace web browsing' in your firewall
and you shouldn't have problems when sending a POST on this website. |
One user is using IE and one is using firefox!!!
Thanks in advance
Tom
Not sure if its the sentinel update now or not. I done all the bb patches last night aswell as the 3.1 patch for 7.4.
Some people cant even login to the site.
Top
Have no idea TBH.
Maybe try over at http://www.nukescripts.net or http://ravenphpscripts.com they are after all more familiar with it and may be a known issue.
Thanks Dar, i have posted on both sites. hope someone has an answer!
Cheers
Top
Ravenscripts helped and the answer was to // out the below in mainfile.php
| Code: : |
if ($_SERVER['REQUEST_METHOD'] == "POST") {
if (isset($_SERVER['HTTP_REFERER'])) {
if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) {
die('Posting from another server not allowed!');
}
} else {
die($posttags);
}
} |
hopefully that helps someone in the future.
Tom
| Quote: : |
Blocked IP: 193.36.230.96
User: themugger
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Blocked on: 2005-08-12 07:05:21
Notes: Added by NukeSentinel™
Reason: Abuse-Script |
What did you try posting?