If you are not registered or logged in, you may still use these forums but with limited features. Show recent topics
  [Search] Search   [Hottest Topics] Hottest Topics   [Members]  Member Listing   [FAQ]  FAQ 
[Register] Register / 
[Login] Login 
My Poor Guestbook is Under Massive Attack  XML
Forum Index » Support Forum
Author Message
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline

My guestbook is at http://www.gilbertmatare.com/gilbertmguestbook/, I have spammers spraying it with all kinds of garbage. I have upgraded to 2.3 after my old 2.2 was defaced and hosed down by spammers. This guestbook business is just not worth all the trouble one has to do, to keep it away from idiots. Why is it so insecure in the first place??. Can someone suggest a trouble free guestbook instead of this one??
If you decide to help me please be explicit and dont use too much jargon. How do I patch this, I prefer if you dont send me to some page where I dont understand whats being said. I am very frustrated right now and ready to explode........LOL I am just a green noobie as far as php goes.

"......Wise men make proverbs but fools repeat them.........."
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

You could use the human verification mod you will find at the top of the GUESTBOOK FORUM or you could try my off shoot of Advanced Guestbook called Lazarus - www.carbonize.co.uk/lazarusgb.zip

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline

open templates/form.php and find
from the human verification mod,
where do I find this file?, I will try it once I get home...........

"......Wise men make proverbs but fools repeat them.........."
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

As it states you will find it in the templates folder of the guestbook.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Anonymous



Okay I get a bunch of errors

Warning: Cannot modify header information - headers already sent by (output started at /backup/gilbertm/public_html/gilbertmguestbook/lang/english.php:104) in /backup/gilbertm/public_html/gilbertmguestbook/lib/admin.class.php on line 33

Warning: Cannot modify header information - headers already sent by (output started at /backup/gilbertm/public_html/gilbertmguestbook/lang/english.php:104) in /backup/gilbertm/public_html/gilbertmguestbook/lib/admin.class.php on line 34

Warning: Cannot modify header information - headers already sent by (output started at /backup/gilbertm/public_html/gilbertmguestbook/lang/english.php:104) in /backup/gilbertm/public_html/gilbertmguestbook/lib/admin.class.php on line 35

Warning: Cannot modify header information - headers already sent by (output started at /backup/gilbertm/public_html/gilbertmguestbook/lang/english.php:104) in /backup/gilbertm/public_html/gilbertmguestbook/lib/admin.class.php on line 36



When I try to add an entry I also get this.

Parse error: parse error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in /backup/gilbertm/public_html/gilbertmguestbook/lib/add.class.php on line 19


Gudos
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

you have some white space in your lang/english.php file. Probably after the ?>. How did you edit it? cPanel?

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline

yes, C-Panel

Code is like this

<?php
# General

$LANG["metatag"] = "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\">";

$LANG["BookMess1"] = "HTML code is disabled";
$LANG["BookMess2"] = "HTML code is enabled";
$LANG["BookMess3"] = "Sign the Guestbook";
$LANG["BookMess4"] = "Back to Guestbook";
$LANG["BookMess5"] = "Administration";
$LANG["BookMess6"] = "Thank you for stopping by my site. Here you can leave your mark.";
$LANG["BookMess7"] = "Comments";
$LANG["BookMess8"] = "Back to submit form";
$LANG["BookMess9"] = "Write a comment for this guestbook entry.";
$LANG["BookMess10"] = "<u>Thank you for signing the guestbook.</u><br><br>Your entry was added successfully! You should be transfered back to the guestbook in 2 seconds.";

$LANG["EmailAdminSubject"] = "New guestbook entry";
$LANG["EmailGuestSubject"] = "Thank you for signing the guestbook";

$LANG["AltIP"] = "IP logged";
$LANG["AltICQ"] = "Send ICQ Message";
$LANG["AltEmail"] = "Send E-mail";
$LANG["AltUrl"] = "View Web Page";
$LANG["AltAim"] = "Instant Messenger";
$LANG["AltCom"] = "Write a comment";

# Form
$LANG["FormMess1"] = "Fill out the blanks below to sign the guestbook. After you submit your entry, you will be returned to the guestbook. The blanks with (*) represent required fields.";
$LANG["FormMess2"] = "Smilies are ON";
$LANG["FormMess3"] = "AGCode is ON";
$LANG["FormMess4"] = "Show legend";
$LANG["FormMess5"] = "Below is your guestbook entry.";
$LANG["FormMess6"] = "AG Code is OFF";
$LANG["FormMess7"] = "Smilies are OFF";
$LANG["FormName"] = "Name";
$LANG["FormEmail"] = "E-mail";
$LANG["FormLoc"] = "Location";
$LANG["FormPic"] = "Picture";
$LANG["FormUrl"] = "Homepage";
$LANG["FormGender"] = "Gender";
$LANG["FormMale"] = "Male";
$LANG["FormFemale"] = "Female";
$LANG["FormMessage"] = "Your Message";
$LANG["FormSelect"] = "Guestbook";
$LANG["FormUser"] = "Username";
$LANG["FormPass"] = "Password";
$LANG["FormReset"] = "Reset";
$LANG["FormSubmit"] = "Submit";
$LANG["FormPreview"] = "Preview";
$LANG["FormBack"] = "Go Back";
$LANG["FormEnter"] = "Guestbook - Administration Centre<br>Before you can proceed you have to enter a valid name and password!";
$LANG["FormButton"] = "Go";
$LANG["FormPriv"] = "Private message";

# Navigation Bar
$LANG["NavTotal"] = "Total Records:";
$LANG["NavRecords"] = "Records Viewed Per Page:";
$LANG["NavPrev"] = "Previous Page";
$LANG["NavNext"] = "Next Page";

# Post Errors
$LANG["ErrorPost1"] = "You forgot to fill in the Name field. Please correct it and re-submit.";
$LANG["ErrorPost2"] = "You forgot to fill in the Message field. Please correct it and re-submit.";
$LANG["ErrorPost3"] = "Your message is either too short or too long. Please correct it and re-submit.";
$LANG["ErrorPost4"] = "One of the input fields does not seem to be valid.";
$LANG["ErrorPost5"] = "Guestbook - Error";
$LANG["ErrorPost6"] = "Image file is too big";
$LANG["ErrorPost7"] = "Wrong image file type";
$LANG["ErrorPost8"] = "Sorry! We have flood-control activated. Please try again after a period of time elapses!";
$LANG["ErrorPost9"] = "Your IP adress is banned!";
$LANG["ErrorPost10"] = "Your message contains some invalid words. Please correct it and re-submit.";
$LANG["ErrorPost11"] = "You forgot to fill in the Comment field. Please correct it and re-submit.";
$LANG["ErrorPost12"] = "You forgot to fill in the Human Verification field. Please correct it and re-submit.";
$LANG["ErrorPost13"] = "The Human verification answer you supplied is wrong. Please correct it and re-submit.";
$LANG["PassMess1"] = "Please enter a valid username and password:";
$LANG["PassMess2"] = "Invalid username or password. Please try again.";
$LANG["PassMess3"] = "Sorry, but the password you entered was not correct.";

# Days
$weekday[0] = "Sunday";
$weekday[1] = "Monday";
$weekday[2] = "Tuesday";
$weekday[3] = "Wednesday";
$weekday[4] = "Thursday";
$weekday[5] = "Friday";
$weekday[6] = "Saturday";

# Months
$months[0] = "January";
$months[1] = "February";
$months[2] = "March";
$months[3] = "April";
$months[4] = "May";
$months[5] = "June";
$months[6] = "July";
$months[7] = "August";
$months[8] = "September";
$months[9] = "October";
$months[10] = "November";
$months[11] = "December";

?>

"......Wise men make proverbs but fools repeat them.........."
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

The problem with cPanel is that it adds a new line to the end of the files it edits. This is why I always recommend downloading the file and editing it on your PC with a text editor. For this purpose I recommend PSPad which is a text editor with syntax highlighting and a built in FTP client.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline

Okay, some errors are now gone after using PSPad, like you suggested.
This is the one I have trouble with when I try to add an entry


Parse error: parse error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in /backup/gilbertm/public_html/gilbertmguestbook/lib/add.class.php on line 19


I had made a backup copy of my server english.php file. which I edited with PSPad, looks like it worked. I might have messed up all the others whilst editing in C-Panel. Can someone get me a copy ??

"......Wise men make proverbs but fools repeat them.........."
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

Open lib/add.class.php in PSPad and turn line numbers on (in View). Paste lines 18 to 20 in here.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline


var $bottestanswer = 'armadillo'; // this is the answer to the
question. It must contain no '
var $email = '';

"......Wise men make proverbs but fools repeat them.........."
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

var $bottestanswer = 'armadillo'; // this is the answer to the
question. It must contain no '

That should all be on one line.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline

I get this error

Parse error: parse error, unexpected T_ELSEIF in /backup/gilbertm/public_html/gilbertmguestbook/lib/add.class.php on line 198


Here is what line 198 looks like, starting from 196-205




196if ($this->name == "") { {
197return $this->db->gb_error($this->db->LANG["ErrorPost1"]);
198} elseif (strlen($this->comment)<$this->db->VARS["min_text"] || strlen($this->comment)>$this->db->VARS["max_text"]) {
199return $this->db->gb_error($this->db->LANG["ErrorPost3"]);
200} elseif ($this->bottest == '') {
201 return $this->db->gb_error($this->db->LANG["ErrorPost12"]);
202} elseif (strtolower($this->bottest) !=
203strtolower($this->bottestanswer)) {
204 return $this->db->gb_error($this->db->LANG["ErrorPost13"]);
205} else {


I appreciate all your efforts Carbo!!. Thanks a lot

"......Wise men make proverbs but fools repeat them.........."
Carbonize
Master
[Avatar]

Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline

Line 196 - { { should only be one.

Carbonize
I am not the maker of the Advanced Guestbook

get Lazarus
[Email] [WWW] [Yahoo!] aim icon [MSN] [ICQ]
Gudos
Beginner

Joined: 05/02/2005 07:24:49
Messages: 13
Location: Ohio, USA
Offline


Back in business, you are the man !!!!!!!!!!!!!!

"......Wise men make proverbs but fools repeat them.........."
 
Forum Index » Support Forum
Go to:   
Based on the open source JForum