latest version and

All web design discussion, including Ultimate Quiz MOD support.

Moderator: CricketMX Forum Moderators

Post Reply
Gephri
Greenhorn
Greenhorn
Posts: 3
Joined: Sun Nov 26, 2006 8:23 pm

I've updated to 1.3.3 but continue to get the "hacking attempt" error whenever quiz answers are submitted. Traced the alert to the following code - but not sure what is triggering it:

Code: Select all

	// Merge all into one extremely huge array; unset
	// this later
	$input = array_merge($HTTP_GET_VARS, $HTTP_POST_VARS, $HTTP_COOKIE_VARS, $HTTP_SERVER_VARS, $HTTP_SESSION_VARS, $HTTP_ENV_VARS, $HTTP_POST_FILES);

	unset($input['input']);
	unset($input['not_unset']);

	while (list($var,) = @each($input))
	{
		if (in_array($var, $not_unset))
		{
			die('Hacking attempt detected !');
		}
//		unset($$var); 						// MOD Backslashes Added
	}

	unset($input);
}

Also, could you update your text file so we see the latest version available - the text file currently shows 1.2:
http://www.cmxmods.net/quiz_latest.txt
User avatar
Toy
Greenhorn
Greenhorn
Posts: 23
Joined: Tue Aug 08, 2006 2:11 pm

1.3.3 is a Beta.
;)
User avatar
battye
Site Admin
Site Admin
Posts: 14391
Joined: Sun Jan 11, 2004 8:26 am
Location: Australia
Contact:

Gephri wrote:I've updated to 1.3.3 but continue to get the "hacking attempt" error whenever quiz answers are submitted. Traced the alert to the following code - but not sure what is triggering it:

Code: Select all

	// Merge all into one extremely huge array; unset
	// this later
	$input = array_merge($HTTP_GET_VARS, $HTTP_POST_VARS, $HTTP_COOKIE_VARS, $HTTP_SERVER_VARS, $HTTP_SESSION_VARS, $HTTP_ENV_VARS, $HTTP_POST_FILES);

	unset($input['input']);
	unset($input['not_unset']);

	while (list($var,) = @each($input))
	{
		if (in_array($var, $not_unset))
		{
			die('Hacking attempt detected !');
		}
//		unset($$var); 						// MOD Backslashes Added
	}

	unset($input);
}

Also, could you update your text file so we see the latest version available - the text file currently shows 1.2:
http://www.cmxmods.net/quiz_latest.txt
Have you made all the required changes? This was fixed in 1.3.1 :)

And regarding the version, see Toy's post :wink:
CricketMX.com in 2022: Still the home of bat's, rat's and other farmyard animals!

"OK, life [as you chose to define it] repeats until there are no more lessons to be learned." - nrnoble (June 12, 2005)
"the new forum looks awesome, it's getting bigger & better" - p2p-sharing-rules (11 Jan, 2008)
"Looks like CMX is not only getting bigger...but, also getting better!!" - moongirl (14 Dec, 2007)
Gephri
Greenhorn
Greenhorn
Posts: 3
Joined: Sun Nov 26, 2006 8:23 pm

yea - did all the updates.
Can you tell me what was "fixed" for this error - I'll try and work backwards from there.

Regarding version - got it,
User avatar
battye
Site Admin
Site Admin
Posts: 14391
Joined: Sun Jan 11, 2004 8:26 am
Location: Australia
Contact:

It was to do with the radio boxes, and their name attribute being set to a number. From memory, to solve this, uqm_ was added in front of the variable. It was done in quiz.php IIRC :)
CricketMX.com in 2022: Still the home of bat's, rat's and other farmyard animals!

"OK, life [as you chose to define it] repeats until there are no more lessons to be learned." - nrnoble (June 12, 2005)
"the new forum looks awesome, it's getting bigger & better" - p2p-sharing-rules (11 Jan, 2008)
"Looks like CMX is not only getting bigger...but, also getting better!!" - moongirl (14 Dec, 2007)
Gephri
Greenhorn
Greenhorn
Posts: 3
Joined: Sun Nov 26, 2006 8:23 pm

got it - went back and reinstalled from scratch
thanks
Post Reply