>>  Site Map >>  Forums >>  PHP-Nuke Security

Forum module - topics in forum:



PHP-Nuke Security - Been hacked? or have a question about securing your site, here's the place.



HTTP_REFERER error

I installed Nuke Sentenal last night on my patched 7.4 setup and a few users are getting this error code when trying to post a reply this message pops up in a white screen.


Code: :
Warning: your browser doesn't send the HTTP_REFERER header to the website.
This can be caused due to your browser, using a proxy server or your firewall.
Please change browser or turn off the use of a proxy
or turn off the 'Deny servers to trace web browsing' in your firewall
and you shouldn't have problems when sending a POST on this website.


One user is using IE and one is using firefox!!!

Thanks in advance

Tom






Not sure if its the sentinel update now or not. I done all the bb patches last night aswell as the 3.1 patch for 7.4.

Some people cant even login to the site.

Top






Have no idea TBH.

Maybe try over at http://www.nukescripts.net or http://ravenphpscripts.com they are after all more familiar with it and may be a known issue.






Thanks Dar, i have posted on both sites. hope someone has an answer!

Cheers

Top






Ravenscripts helped and the answer was to // out the below in mainfile.php

Code: :
if ($_SERVER['REQUEST_METHOD'] == "POST") {
  if (isset($_SERVER['HTTP_REFERER'])) {
    if (!stripos_clone($_SERVER['HTTP_REFERER'], $_SERVER['HTTP_HOST'])) {
        die('Posting from another server not allowed!');
    }
  } else {
    die($posttags);
  }
}


hopefully that helps someone in the future.

Tom






Quote: :
Blocked IP: 193.36.230.96
User: themugger
Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Blocked on: 2005-08-12 07:05:21
Notes: Added by NukeSentinel™
Reason: Abuse-Script


What did you try posting?




Attention! You are currently viewing sitemap page!
We strongly suggest to look at original content

Search from web

Valid HTML 4.01 Valid CSS