vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Major Additions - ibProArcade - professional Arcade System (https://vborg.vbsupport.ru/showthread.php?t=101554)

Kyderoy 09-29-2006 06:31 PM

I keep getting this error message when I try to set the permissions. What can I do to fix this?

mySQL query error: UPDATE usergroup SET arcade_access='1',p_require='0',max_play='0',ppd_r equire='0',ibpa_cats='0',tourn ey='' WHERE usergroupid=1

mySQL error: Incorrect integer value: '' for column 'tourney' at row 1
mySQL error code:
Date: Friday 29th 2006f September 2006 03:31:33 PM

da420 09-29-2006 07:43 PM

@ VaaKo
https://vborg.vbsupport.ru/showthread.php?t=106567

@ Kyderoy
Post your issue in the support forums.
https://vborg.vbsupport.ru/forumdisplay.php?f=170

smsmasters 10-01-2006 11:23 AM

WOW, excellent mod! But, how do I edit the arcade templates? I can't find them in my vb panel.

Thanks

smsmasters 10-01-2006 11:34 AM

I get this error when trying to import games:

Code:

mySQL query error: INSERT INTO games_list (gname,gwords,gtitle,bgcolor,gwidth,gheight,active,object,gkeys,gcat,cost,jackpot,jackpot_type,added,tourney_user,gtime) VALUES ('threedsuper','Goal! See if you can be tops in this 3D classic','3D SuperBall','000000','550','420','1','Goal! See if you can be tops in this 3D classic','','1','0','0','-1','1159706034','1','0')

mySQL error: Unknown column 'tourney_user' in 'field list'
mySQL error code:
Date: Sunday 01st 2006f October 2006 01:33:54 PM


fxs158 10-02-2006 07:46 PM

I been having some problems with users registering bogus accounts on my forum. Others have reported the same, this and the shout server was the last mod installed prior to the problem arrising. Not saying that someone exploiting the program, this is a great hack and it is killing me not having in the forum. Since I removed them both I have not had any more problems.

If you are familiar with php my admin look for users born in january 1 1980. All my bogus accounts had that birth date.

If you have access to the apache logs look for

//register.php


For some reason that always shows when they send the create command.


If you find some of those things on your logs then go here and report it;


http://www.vbulletin.com/forum/showthread.php?t=199401


I know this is not fair to this great mod and I am not saying that it is the culprit. Just doing a process of elimination and starting from the last mods I installled prior to the problem.

Gripemaster 10-03-2006 02:22 AM

Quote:

Originally Posted by smsmasters
I get this error when trying to import games:

Code:

mySQL query error: INSERT INTO games_list (gname,gwords,gtitle,bgcolor,gwidth,gheight,active,object,gkeys,gcat,cost,jackpot,jackpot_type,added,tourney_user,gtime) VALUES ('threedsuper','Goal! See if you can be tops in this 3D classic','3D SuperBall','000000','550','420','1','Goal! See if you can be tops in this 3D classic','','1','0','0','-1','1159706034','1','0')

mySQL error: Unknown column 'tourney_user' in 'field list'
mySQL error code:
Date: Sunday 01st 2006f October 2006 01:33:54 PM


I had the same problem with some games. I found that if you manually add the game by entering the values from the error (gname, gwords, gtitle, bgcolor, gwidth, and gheight) in the boxes at the top of the "Add Game" page, the game will install. The values are in the error:

gname = Superball
bgcolor = 000000
gwidth = 550
gheight = 420
Game Description and Game Objective = Goal! See if you can be tops in this 3D classic


Hope this helps :)

MrZeropage 10-03-2006 06:13 AM

Quote:

Originally Posted by fxs158
I been having some problems with users registering bogus accounts on my forum. Others have reported the same, this and the shout server was the last mod installed prior to the problem arrising. Not saying that someone exploiting the program, this is a great hack and it is killing me not having in the forum. Since I removed them both I have not had any more problems.

If you are familiar with php my admin look for users born in january 1 1980. All my bogus accounts had that birth date.

If you have access to the apache logs look for

//register.php


For some reason that always shows when they send the create command.


If you find some of those things on your logs then go here and report it;


http://www.vbulletin.com/forum/showthread.php?t=199401


I know this is not fair to this great mod and I am not saying that it is the culprit. Just doing a process of elimination and starting from the last mods I installled prior to the problem.

I heared several times that the shoutbox is somehow unsecure.

ibProArcade does not has any reference to register.php or creating accounts, so this is impossible to be responsible for such things.

You should better investigate before posting such things and make others fear something that is not possible here ;)

fxs158 10-03-2006 11:10 AM

Quote:

Originally Posted by MrZeropage
I heared several times that the shoutbox is somehow unsecure.

ibProArcade does not has any reference to register.php or creating accounts, so this is impossible to be responsible for such things.

You should better investigate before posting such things and make others fear something that is not possible here ;)


I am not a coder, I do not need to investigate to warn others about potential problems. It is your job as the coder to post what you posted to rule things out, or instead of getting bent out of shape maybe look into the allegation. ;)

Sad part is everyone gets offended by the remark because their code is secure and try to pass the buck. Vbulletin is passsing the buck to you guys and now you are passing it to shoutcast. All I am asking is for people to look at their logs to see if they find the same things so that we can sort out whos code is being exploited. In the end someones code is being exploited...

Your are saying it is not yours, then dully noted! I do not have shout box installed it wass shoutcast, sorry for the confusion.

MrZeropage 10-03-2006 06:50 PM

Shoutcast is a service installed on your server, if you do not secure this or set it up correctly, it could put a hole in your server...

ibProArcade is being used by >1500 users and online for about one year now in this codebase, so I think if there would be such a problem with it, it would be discovered more early ;) and again I can state that ibProArcade has no code that writes new accounts in the userDB



You have vBulletin 3.6.1 (or 3.6.2) installed to make sure this is no older vBulletin-Exploit ? You have setup everything correct so that spambots ect. don't have a chance ?
Scott (vBulletin-Support) also told
Quote:

Originally Posted by Scott
You can stop people from doing this by using the username regular expression filter in 3.6.0 to stop them registering.

The Logs you quoted from your Server also give good details:
Quote:

Originally Posted by ServerLog
63.166.111.6 - - [04/Sep/2006:19:51:58 -0400] "POST //register.php HTTP/1.1" 404 12542 "-" "-"
63.166.111.6 - - [04/Sep/2006:19:51:58 -0400] "POST /forums//register.php HTTP/1.1" 200 21176 "-" "-"

There is some data directly being sent to your register.php which is part of your vBulletin.
Maybe you have some Modification/Hack that is using a PlugIn in register.php then you should check this...



btw I am not offended by your posting, but I want to avoid that anybody looking here and reading this could ever think "Huh, better don't touch ibProArcade, it seems to be unsecure" which it definatly is not :)

fxs158 10-03-2006 09:17 PM

Quote:

Originally Posted by MrZeropage
Shoutcast is a service installed on your server, if you do not secure this or set it up correctly, it could put a hole in your server...

ibProArcade is being used by >1500 users and online for about one year now in this codebase, so I think if there would be such a problem with it, it would be discovered more early ;) and again I can state that ibProArcade has no code that writes new accounts in the userDB



You have vBulletin 3.6.1 (or 3.6.2) installed to make sure this is no older vBulletin-Exploit ? You have setup everything correct so that spambots ect. don't have a chance ?
Scott (vBulletin-Support) also told
The Logs you quoted from your Server also give good details:There is some data directly being sent to your register.php which is part of your vBulletin.
Maybe you have some Modification/Hack that is using a PlugIn in register.php then you should check this...



btw I am not offended by your posting, but I want to avoid that anybody looking here and reading this could ever think "Huh, better don't touch ibProArcade, it seems to be unsecure" which it definatly is not :)


Thanks for the post, as I posted on vbulletin the hacks I have installed on the vbulletin 3.61 are ;

Quote:

ibProArcade for vBulletin 2.5.6 ibProArcade - professional Arcade System for vBulletin
Edit Disable Export Uninstall
Log Logins Hack 2.0 Log Logins Hack
Edit Check Version Disable Export Uninstall
Members who have visited the forum 4.21 Display members who have visited the forum.
Edit Disable Export Uninstall
Miserable Users 2.05 A way to really annoy anyone you don't want visiting your forum.
Edit Disable Export Uninstall
Multiple Login Detector 1.03 Cookie-based multiple account login detector
Edit Disable Export Uninstall
PM Workbench 1.00 Beta 5 Toolset for managing PM's
Edit Disable Export Uninstall
PM Workbench - Performance Pack 1.00 Beta 1 Add extra indexes to your tables to improve performance
Edit Disable Export Uninstall
PM Workbench - Read/Search Private Messages 1.00 Beta 4 PM Workbench module to be able to read and search members Private Messages
Edit Disable Export Uninstall
PM Workbench - Report PM 1.00 Beta 1 Adds the option for members to report an abusive PM.
Edit Disable Export Uninstall
Shoutcast Status Full 1.9 Shoutcast Status Full 1.9
Edit Enable Export Uninstall
vB Spell 0.10.2b vB Spell allows you to provide a spell checking window through your editor interface.
Edit Disable Export Uninstall
vBadvanced CMPS 2.2.0 vBadvanced Content Management & Portal System
Edit Disable Export Uninstall
Welcome Headers 4.1.0 Boost registration and activity rates with more visible guest welcome and member status messages.
Since I uninstalled shoutcast and this hack there was one more attempt to registered and they failed. Maybe that is coincidence, as I noticed before they succeded several attempts that failed.

Considering you are a coder, couldd you tell me what hack of the ones posted you would think that intereacts with register.php. Another member on the thread that I posted in vbulletin identified only one hack on both our forums Log Logins Hack 2.0. I just cannot see how they could use this hack to send data to register.php.

Sorry again, just want to get to the bottom of this, if you like send me a pm with your suggestions. That way we do not pollute your thread with off topic stuff.


Thanks


All times are GMT. The time now is 07:35 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.07208 seconds
  • Memory Usage 1,786KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (7)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (7)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete