You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 141 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
NukeCops: Security

Search on This Topic:   
[ Go to Home | Select a New Topic ]

PHP Nuke v.8.0 Directory Traversal
SecurityIn response to PHP Nuke v.8.0 Directory Traversal, I believe that is the same issue listed previously here.

All users phpNuke 7.8 Patched and lower / RavenNuke are unaffected. Users of phpNuke 7.9/8.0/8.1 Patched need to make the following changes, since some of these code never made it into NukeResources Patched package: Security: PHP-Nuke "lang" Local File Inclusion Vul
Posted by Evaders99 on Friday, June 19 @ 07:28:14 CEST (1485 reads)
(comments? | Score: 0)
PHP Nuke v.8.0 (referer) SQL Injection
SecurityIn response to PHP Nuke v.8.0 (referer) SQL Injection, I believe this is a duplicate vulnerability. If you are using the Patched files, RavenNuke, you should already be protected.

Unpatched users, be warned. Simple file changes should solve this issue: see previous Security: PHP-Nuke HTTP "referer" SQL Injection Vu thread
Posted by Evaders99 on Friday, June 19 @ 06:59:56 CEST (1575 reads)
(comments? | Score: 0)
ReCAPTCHA integrated into phpNuke
Securitydmolavi writes "If you're a user of NukedGallery.net, you'll notice that the standard phpNuke CAPTCHA display there has been replaced by reCAPTCHA, which you may have seen on other sites like Craigslist. For those of you not familiar with reCAPTCHA, it is a great spambot fighter. Read this article on what reCAPTCHA is and how it works.

In order to fight the increased number of spambots on this site, I installed reCAPTCHA in place of the standard CAPTCHA during account registration. If you want this done on your site, submit a paid support request. The fee is a flat $25 for the installation. "
Posted by VinDSL on Wednesday, April 08 @ 20:48:38 CEST (2366 reads)
(comments? | Score: 0)
Http Blacklisting
Securitylippylion writes "In helping all those with Nuke security issues and problems with spammers, comment spammers and other such people (the ones that post adverts on forums) and those that steal email addresses, I have discovered something I felt is really usefull and would benefit the whole of the Nuke community and others running websites.

The details are to long winded to go into here, but in short it is this, When someone registers for your site, a system that checks their ip against a dns record to see if they exist on a universal http blacklist, having been caught spamming etc. with that particular ip"
Posted by VinDSL on Wednesday, May 14 @ 21:16:54 CEST (2179 reads)
(Read More... | 1032 bytes more | 5 comments | Score: 0)
Free PHP Encoder and Obfuscator Online!
Securitykenetix writes "Hi everyone, I'm pleased to announce the opening of a new site and a free script here at http://www.freephpencoder.com. The site offers a free php code obfuscation and encoding service that allows people to distribute workable encoded php files for free.

Steps to encoding are extremely simple, simply upload the unencrypted file, download the encoded file, and you are ready to use the file (with the decryptor).

Many more features are planned to implemented with different encoding algorithms, but currently the free service currently utilizes the Zend engine for decoding. A byte encoding feature is currently being developed, and will be released shortly.

More information regarding this can be obtained from my community site:
HERE"
Posted by VinDSL on Sunday, March 09 @ 08:26:39 CET (4658 reads)
(Read More... | 10 comments | Score: 0)
PHP-Nuke modules/Search/index.php SQL Bug
SecurityAnother security bug... all versions of phpNuke (Nuke Patched / Nuke Patched Core / RavenNuke) need to be patched.

For more information and code changes, see my site Evaders Coding Squadron
Posted by Evaders99 on Thursday, January 24 @ 07:52:19 CET (2561 reads)
(Read More... | 7 comments | Score: 0)
.htaccess Filtering
Securitydslserver writes "There are several ways to secure your phpNuke website. You can use addons like NukeSentinel, NukeCops security advise forum or .htaccess filtering. The simplest way to do this is .htaccess where you can filter some known bots so they will never gain access to your site, ban ip's, and spam bots (majority of attack attempts originate from scripts using a tool called libwww-perl).I analyze several web server logs each day and I put together several lines in .htaccess to block many of those script-kiddies from gaining access to my site. For anyone interested in securing your php website using .htaccess please visit new phpnuke code hacks section on our website."
Posted by VinDSL on Thursday, July 26 @ 03:23:48 CEST (3107 reads)
(Read More... | 9 comments | Score: 5)
A CMS With A Focus On Security
Securityforgotz writes "DaDaNuke is proud to announce that we have expanded our current inventory to offer products, service and support for Nuke-Evolution. Click here to see our new site! Nuke-Evolution is a variant of the CMS (Content Management System) PHP-Nuke, version 7.6. "Evo", as it is affectionately know, has it's roots in the former TechGFX project, PHP-Nuke Platinum. Although the continuation of that project under another development team may be found here. Consider partly, that Nuke-Evolution is a lessons learned exercise, as a result of the experience of former Platinum developers, who now make the core of the Nuke-Evolution development team. Read More... for complete story.

As with many people involved in the PHP-Nuke community-at-large may know, security has been questionable with this CMS (PHP-Nuke). I will not bother with that topic now, for it has been discussed ad nausea and better left to expand on this issue with it's own article. I will say this, the Nuke-Evolution Development Team has made a priority, security. Not just the core CMS itself, but all modules, addons, MODS, hacks and tweaks as well. They are committed to whichever script they use, anywhere in the system, that exploits, attacks and prevention are coded in. And, many of the modules and BBtoNuke MODS included, have been updated as well. This typically results in a better, more secure script than that which may still be available from the original author(s)!

A major part of the success of any platform that delivers content and functionality, is availability of third party software and backwards compatibility. At DaDaNuke Evolution we are committed to producing quality scripts and service for this ever growing community. Join us today, register here now and show your support for this great CMS. DaDaNuke Evolution is completely Donations driven."
Posted by VinDSL on Monday, May 28 @ 10:00:00 CEST (2778 reads)
(Read More... | 6 comments | Score: 0)
Auto-Backup Your NUKE Database
Securityzulhar writes "Making backups is essential because problems inevitably occur and you need to be in a position to take action when disaster strikes. Are you maintaining your databases properly? Do you participate in a backup and recovery routine that checks on the health of the data? Are you prepared for worst thing that might happen to your website?

Read it more on how to auto-backup your nuke database at
http://zulkiplyharun.com"
Posted by VinDSL on Saturday, March 03 @ 16:10:13 CET (3505 reads)
(Read More... | 12 comments | Score: 0)
GUIDE: HOW TO RENAME YOUR ADMIN.PHP
Securityzulhar writes "Recently, I wrote a guide on how to modify phpnuke captcha and has resulted in a flurry of comments and queries requesting me to write a guide on "how to change admin.php?"

This article is not intended to teach you how to hack into PHPNuke but how to secure it properly. Since most of hackers are targeting this critical file to achieve their mission, you have to camouflage the file and secure it properly.

Read the rest the article for some ideas on how to secure your PHPNuke against hackers..."
Posted by VinDSL on Wednesday, February 07 @ 12:17:59 CET (3351 reads)
(Read More... | 10 comments | Score: 0)
Forums
Syndication
Last 20 Forum Messages

vbulletin migration
Last post by simrin in Chit Chat on Jan 19, 2012 at 20:20:37

PNT-nuke(obnuke) published
Last post by mehmet_akif in PHP-Nuke Community WebSites on Jan 12, 2012 at 22:55:59

Sentinel blocked me out
Last post by azism in Nuke Security on Dec 10, 2011 at 18:55:40

Big story of the Day
Last post by ngski in Tips And Tricks on Oct 18, 2011 at 04:47:47

Mod Ported: Approve Posts mod
Last post by doffer in BBtoNuke Installation on Jul 15, 2011 at 21:26:55

Adding a Download... Problem:
Last post by Luckystrike in Post Installation Help on Jul 06, 2011 at 04:42:35

Member Forum Group Validation link not working.
Last post by lilc420 in Bug Reports on Apr 23, 2011 at 16:37:53

Moderation Queue
Last post by doffer in BBtoNuke Installation on Mar 26, 2011 at 15:16:59

adding video to news section
Last post by tumi in Tips And Tricks on Mar 18, 2011 at 16:56:11

Image Mapping
Last post by Luckystrike in Post Installation Help on Mar 04, 2011 at 18:54:05

Site Visitors Block
Last post by Slackervaara in Installation for Newbies on Feb 28, 2011 at 04:51:31

Seting up new Admin : allow to edit messages
Last post by Slackervaara in Basic Operation on Feb 25, 2011 at 05:02:13

How to restore PHP-Nuke from backup
Last post by Slackervaara in Installation for Newbies on Feb 20, 2011 at 07:42:52

Dazzle Software - Largest Script & Resource Website
Last post by perfect-games in Shameless Advertising on Jan 14, 2011 at 19:24:18

Creating a Review with a table
Last post by azism in Basic Operation on Jan 03, 2011 at 18:12:07

Помощ&
Last post by Cherniykoldun in Shameless Advertising on Dec 24, 2010 at 17:33:23

How to make div tags work in content module
Last post by hhg in Modules on Dec 24, 2010 at 00:29:14

casino letouquet minneapolis
Last post by ABARGYBOYMMES in Shameless Advertising on Nov 12, 2010 at 12:38:42

casino in montruex
Last post by MarvarCaure in Shameless Advertising on Nov 06, 2010 at 17:13:53

php Functions question
Last post by v3x in Post Installation Help on Nov 04, 2010 at 12:22:49


[ NukeCops ]
Survey
Should phpNuke continue to support other databases besides MySQL?

Yes
No
Does anyone care?



Results
Polls

Votes: 1364
Comments: 23
Site Visitors
Login Here:

Nickname:
Password:
Security Code: Security code
Type Security Code Here:

Members List Membership:
Latest: xcorvif's Profile xcorvif
Today: 0
Yesterday: 0
Overall: 47354

Visitation:
Guests: 142
Members: 0
Total: 142


You are Anonymous user. You can register for free by clicking here
Support Us
Help Keep NukeCops Online
And Support Our Work
Make donations with PayPal!
Donat-o-Meter Stats
February´s Goal: $350.00
Due Date:   Feb 29
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $350.00

©
Donations
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 1.021 Seconds - 141 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::