Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
UBBDev.com
UBBWiki.com
Who's Online
1 registered (driv), 37 Guests and 16 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 05/10/05
Posts: 1
Top Posters (30 Days)
Ruben 49
DennyP 24
Gizmo 23
Dunny 17
SteveS 14
AllenAyres 12
dbremer 10
drkknght00 9
SD 9
driv 8
Latest Photos
OK Corral Shoot Out
Testing
Basildon Train Station
Basildon Town Centre looking from the rounderbout
Basildon Town Square
Page 3 of 8 < 1 2 3 4 5 6 7 8 >
Topic Options
#172896 - 01/09/07 11:46 PM Re: A few Q's [Re: Rick]
DieselRam.com Offline
newbie
Registered: 01/04/07
Posts: 26
Loc: Denver , Colorado
Silly isn't it. I have a ticket in with them so we shall see.
_________________________
Webmaster
www.DieselRam.com
Top
Express Hosting
Express Hosting "We are the official hosting company of UBB.threads. Ask us about our free migration services to migrate your UBB.threads installation."
#172897 - 01/09/07 11:58 PM Re: A few Q's [Re: DieselRam.com]
Gizmo Offline

Registered: 06/05/06
Posts: 14994
Loc: Portland, OR; USA
It's cat with a string, "cat" doesn't do anything, but "cat __" triggers... the linux cat command is used to view the contents of a file; i'm sure "tail __" will error as well.

bascially that rule is to thwart users exploiting insecure scripts to utilize system commands, they don't want them to cat /var/www/html/config.php (or something similar)...

As i said, it's a really anal module...
_________________________
Forums: UGN Security & VNC Web Design & Development
UBB.Threads: UBB.Wiki, My UBBSkins, UBB.Sitemaps
Longtime UBB Supporter, UBB Beta Tester & Resident Post-A-Holic.
UBB Modifications, Styling, Coding Services, Disaster Recovery, and more!
Top
#172899 - 01/10/07 12:06 AM Re: A few Q's [Re: Gizmo]
Rick Offline
Post-a-holic
Registered: 06/04/06
Posts: 10164
Loc: Aberdeen, WA
Yeah, "cat" anything will trigger it. Strange, they don't have a variety of other commands filtered that can do the exact same thing. more, less, head, print, etc. all work fine. Sounds like they were maybe just getting started setting it up, or something.
Top
#172900 - 01/10/07 12:10 AM Re: A few Q's [Re: Rick]
DieselRam.com Offline
newbie
Registered: 01/04/07
Posts: 26
Loc: Denver , Colorado
They have been around for a lttle while not sure how long. Hopefully they will get it corrected in the AM .
_________________________
Webmaster
www.DieselRam.com
Top
#172901 - 01/10/07 12:39 AM Re: A few Q's [Re: Gizmo]
ntdoc Offline
Registered: 11/09/06
Posts: 3384
Dang... Giz beat me to it \:p Guess that's what I get for doing real work ;\)
Top
#172903 - 01/10/07 12:55 AM Re: A few Q's [Re: ntdoc]
Gizmo Offline

Registered: 06/05/06
Posts: 14994
Loc: Portland, OR; USA
 Originally Posted By: Rick
Yeah, "cat" anything will trigger it. Strange, they don't have a variety of other commands filtered that can do the exact same thing. more, less, head, print, etc. all work fine. Sounds like they were maybe just getting started setting it up, or something.
They're likely using the builtin subset and haven't started tweaking; the default set of filters has a load of examples, I believe cat is one of them.

 Originally Posted By: ntdoc
Dang... Giz beat me to it \:p Guess that's what I get for doing real work ;\)
as usual, i am, the man :nod: lol
_________________________
Forums: UGN Security & VNC Web Design & Development
UBB.Threads: UBB.Wiki, My UBBSkins, UBB.Sitemaps
Longtime UBB Supporter, UBB Beta Tester & Resident Post-A-Holic.
UBB Modifications, Styling, Coding Services, Disaster Recovery, and more!
Top
#172907 - 01/10/07 01:25 AM Re: A few Q's [Re: Gizmo]
jgeoff Offline
Pooh-Bah
Registered: 08/08/06
Posts: 1922
Loc: NJ

Funny... even tho I can't type the word lynx_, I can type in cat is pregnant and even cat /var/www/ just fine...
_________________________
GangsterBB.NET (Ver. 7.5.6)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Chrome, Firefox, & Safari (Win7 and iPhone); No IE, ever!
Top
#172908 - 01/10/07 01:34 AM Re: A few Q's [Re: jgeoff]
Gizmo Offline

Registered: 06/05/06
Posts: 14994
Loc: Portland, OR; USA
 Originally Posted By: jgeoff

Funny... even tho I can't type the word lynx_, I can type in cat is pregnant and even cat /var/www/ just fine...
That means that your host doesn't have those lines defined in their mod_security configuration ;)...
_________________________
Forums: UGN Security & VNC Web Design & Development
UBB.Threads: UBB.Wiki, My UBBSkins, UBB.Sitemaps
Longtime UBB Supporter, UBB Beta Tester & Resident Post-A-Holic.
UBB Modifications, Styling, Coding Services, Disaster Recovery, and more!
Top
#172910 - 01/10/07 01:41 AM Re: A few Q's [Re: Gizmo]
jgeoff Offline
Pooh-Bah
Registered: 08/08/06
Posts: 1922
Loc: NJ

Really? ;\)

Do you know of a way I can check the settings via cPanel? I don't see such options. I guess I could ask them what "everyday words" I can't use! lol
_________________________
GangsterBB.NET (Ver. 7.5.6)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Chrome, Firefox, & Safari (Win7 and iPhone); No IE, ever!
Top
#172911 - 01/10/07 01:57 AM Re: A few Q's [Re: jgeoff]
Gizmo Offline

Registered: 06/05/06
Posts: 14994
Loc: Portland, OR; USA
Most things in the configs are strings, it's nto formed to check for everyday words, some words just fit in the filtered strings.

And there is no way to see the config, they'd have to sen dyou the config file; which, for security, they're doubtful to do.

You could go and download the module and tear it apart though ;\)
_________________________
Forums: UGN Security & VNC Web Design & Development
UBB.Threads: UBB.Wiki, My UBBSkins, UBB.Sitemaps
Longtime UBB Supporter, UBB Beta Tester & Resident Post-A-Holic.
UBB Modifications, Styling, Coding Services, Disaster Recovery, and more!
Top
Page 3 of 8 < 1 2 3 4 5 6 7 8 >



Moderator:  AllenAyres, Harold, Ian, Ron M 
Shout Box

Today's Birthdays
No Birthdays
Recent Topics
Ability to "like" individual posts (not Facebook "likes)
by doug
05/23/12 09:03 AM
Island Permissions
by ThreadsUser
05/22/12 03:03 PM
streaming video
by prkrgrp
05/20/12 07:02 PM
New Posts Corrupted? Can someone help?
by PianoWorld
05/19/12 09:41 AM
Custom forum permissions
by ntdoc
05/18/12 02:07 PM
Forum Stats
10489 Members
36 Forums
33841 Topics
181696 Posts

Max Online: 978 @ 06/24/07 11:19 PM
Random Image