https://proxy2.de/forum/posts/list/2.php JForum - http://www.jforum.net Hello!:


I am using the Guestbook 2.3.1. I am very dissapointed of this service because during the last three weeks I have suffered twice the attack of an stupid man who has nothing to do but bother people!. So I wonder where is the protection you offer?.
The first attack he made was written in English and even I changed my passwords and codes, he entered again with a German attack!.
I urgently need to know what can I do to protect myself. I don`t want to suffer other attacks; it is not nice!. If not, I will have to change my guestbook to another server.
Hoping to hear from you.
Thanks,
Rodolfo]]> https://proxy2.de/forum/posts/preList/3330/9052.php https://proxy2.de/forum/posts/preList/3330/9052.php GMT

i exactly understand what you mean ! having a guestbook runing which is open for intruders is a very bad thing. and the internet is full with strange guys .. believe me

anyway ... i also discovered some possible security hack with the gusetbook version 2.3.1 ! but first i have to say the code is written fine and the error doesn't seem to be in there. guestbook code is okay !

but as far as i have studied there seems to be a problem with PHP and this get_magic_quotes_gpc() function !! i already posted a bug report on http://bugs.php.net but so far no answer ... the problem isn't solved yet

my 2.3.1 version guestbooks for my customers are also OPEN for intruders ! therefore i developed a SECURITY FIX PATCH for the 2.3.1 version and posted all the stuff at my website at http://www.beckspaced.com/gb_fix/index.php

why don't you go there and have a look at that stuff

all information is written there ..hope it helps a bit to fix your guestbook :o

also wrote an email to http://proxy2.de but so far haven't received any answer, yet

however ... hope this helps !

all the best
becki]]> https://proxy2.de/forum/posts/preList/3330/9063.php https://proxy2.de/forum/posts/preList/3330/9063.php GMT 1 - Update the version of PHP they use
2 - Turn on Magic_quotes

I actually started going through the guestbook code to try and make a new version with the Yahoo/MSN mods as well as my image verification as options in the admin but it's not an easy script to follow. It jumps all over the pcae as it uses objects ]]> https://proxy2.de/forum/posts/preList/3330/9188.php https://proxy2.de/forum/posts/preList/3330/9188.php GMT