Missing security codes

Private Joined: Feb 26, 2003 Posts: 48

Well our problems have been solved, we removed the security code check, and we going to provide a download with the Your_Account module and admin.php file without the security check, because many people including myself have had problems with it. The problem was solved by Mighty_Y and Mikem ( http://www.nukemods.com ) and i want to thank both of them.'

Edit Just saw mighty_y has supliedf us with a download just click here to view the thread and download the Your_Account module and admin.php file without the security check.Edit

Joined: Jan 31, 2004 Posts: -88

ok. Here's my theory.

On Windows I had my site running 100%.

Since Migrating over to linux, I now have to compile php manually, and manually define everything needed for PHP to run (including GD)

My theory is that it's not a site problem but a problem at compile time when defining niceties like the jpeg dir and the zlib / png dirs.

I'll get back to you after I've reinstalled my server (again) and got my site going.

AI

Posted: Sat Mar 29, 2003 5:42 pm

AI..make sure you take notes when compiling your php. Smile

I know quite a few people have had this Missing Security code issue, and I think you are right on track with the GD library thingambop not getting compiled right or at all and may have a big play in it.
I would guess this is going to have an effect moreso on users that run their own local servers.

I also imagine we will possibly see MUCH more of this issue when Nuke6.5 releases to the public Shocked

mikem

Nuke Cadet Joined: Feb 15, 2003 Posts: 8 Location: USA

mikem,
I was wondering how this could be true if the security code and code_bg.jpg image are showing for Your_Account? If it were a GD library problem, etc, wouldn't it effect the Your_Account too?

mikem wrote:

AI..make sure you take notes when compiling your php. Smile

I know quite a few people have had this Missing Security code issue, and I think you are right on track with the GD library thingambop not getting compiled right or at all and may have a big play in it.
I would guess this is going to have an effect moreso on users that run their own local servers.

I also imagine we will possibly see MUCH more of this issue when Nuke6.5 releases to the public Shocked

mikem

Thanks,
Peter

Posted: Sat Mar 29, 2003 9:09 pm

It does affect the Your Account module(loggin) and can affect the admin login in some way.
I don't know enough about GD library, but I run a localhost here on my computer WITHOUT GD libraray installed.

The effect I get is NO security code shows up on my localhost, and I can still loggin. The security code is disabled IF GD library is NOT installed at all. At least that holds true on my localhost here.

SO, in theory, wouldn't that mean, that IF you have GD library installed, but not COMPILED or CONFIGURED correctly, then the security code feature WILL be enabled in Nuke, but will not work correctly, i.e. no security code image will show up, or the security code is not getting generated before the image is called.

I got this theory when I was editing the admin loggin and Your account module loggin to disable the Security code feature.
In both files I looked at, every call was an IF GD library statement, which to me means, if GD library is installed, use it and generate a code, if not, no code..thus the reason the secuirty feature is totally disabled with no adverse affects on the Your Account loggin or admin loggin if GD library is NOT installed at all. BUT again, if it is installed and not compiled, so "they" say correctly, then the problem rears it's ugly head.

That I think is why users are getting a missing security code when all other possibilities have been extinguished.
The script STOPS at the if statement. If no GD library, no security. If yes GD library, then GO on the security..oops, GD library is not working and the security code is not getting generated before the image is called. Confused

OR, maybe it's a version problem with GD library. My Online Webhost runs version 2.0 of GD library.

mikem

Nuke Cadet Joined: Feb 15, 2003 Posts: 8 Location: USA

Ok,
The problem I was having was only with the admin security code. The security code for user login on my site works like it should. So, that's why I questioned whether it could be the GD library, etc. I couldn't login as admin---missing image in admin login. But, like I said, users could login because the image (code_bg.jpg) in Your_Account showed as well as the security code.
Maybe we are (were) haveing different problems. I just uploaded an old 6.5 admin.php and auth.php so that I, as admin, could login. The users still must input the security code since that works just fine.
Strange things here to say the least. Laughing

Peter

Captain Joined: Jan 17, 2003 Posts: 629 Location: Europe

Mike, I have no GD library installed on my server and the security code is working.

to ALL:
Does anybody have such problems with RC2 and RC3?

Private Joined: Feb 26, 2003 Posts: 48

Yeah i doubt myself if it is a gd problem because i had the problem (see some post above) on my main site ( http://www.portedmods.com) but not on our test site ( http://test.portedmods.com ) which obviously are located on the same server.

Joined: Jan 31, 2004 Posts: -88

Imago wrote:

Mike, I have no GD library installed on my server and the security code is working.

to ALL:
Does anybody have such problems with RC2 and RC3?

Imago, there's no way in hell that you could be running hte security code on ur system without the GD Library. It's hardcoded into Nuke that if GD's not loaded, the security code doesn't get loaded either. It needs the GD library to be able to generate the security code as part of the image.

AI

Joined: Jan 31, 2004 Posts: -88

anor wrote:

Yeah i doubt myself if it is a gd problem because i had the problem (see some post above) on my main site ( http://www.portedmods.com) but not on our test site ( http://test.portedmods.com ) which obviously are located on the same server.

You might be mistaken there m8. Subdomains don't have to be on the same server as the main domain.

AI

Private Joined: Feb 26, 2003 Posts: 48

Quote:

You might be mistaken there m8. Subdomains don't have to be on the same server as the main domain.

Oops sorry didn't knew this but the subdomain of us is on the same server so that;s why i said that.

Sergeant Joined: Apr 05, 2003 Posts: 94

I don't know the first thing about php but when I first installed v6.5 final I got a couple of mysql errors on the main page.
The fix was to amend some of the first few lines in mainfile.php which had the end result of not loading the GD library -and curiously enough, I suddenly had no security image, even though I logged in as Admin originally with it and also set up a test user account.

From this I deduce that if the Gd lib is not called in mainfile.php no security image is generated BUT users and admins can still log in.

Hope you find the eventual permanent fix - good luck.

Joined: Jan 31, 2004 Posts: -88

actually, it's php.ini that loads the GD library.

I've found the solution to this issue anyway, and i posted it in the nuke security forum

AI

Nuke Cadet Joined: Feb 15, 2003 Posts: 8 Location: USA

Hi,
Where was the solution posted? Is that at phpnuke.org?

ArtificialIntel wrote:

actually, it's php.ini that loads the GD library.
I've found the solution to this issue anyway, and i posted it in the nuke security forum
AI

Thanks,
Pete

Joined: Jan 31, 2004 Posts: -88

I think I mentioned where I posted the solution in the very same post you quoted - IN THE NUKE SECURITY FORUM.

Please try searching in the future.

AI