View ProjeQtOr On SourceForge.net
ProjeQtOr - Project Management Tool
Support us on Capterra
OIN - Open Invention Network
ProjeQtOr free project management software - [SOLVED] Hack detected when saving Periodic meeting - ProjeQtOr
 
 

[SOLVED] Hack detected when saving Periodic meeting

More
20 Jan 2016 12:05 #1 by youch
Hack detected when saving Periodic meeting was created by youch
Hello,
With Projeqtor V5.2.1, when saving a new or existing periodic meeting :

Error displaying :
Erreur sur finalizeMessageDisplay('resultDiv') :
La destination n'est pas un 'node' ou pas un 'widget'
ou lastOperation or lastOperationStatus n'est pas un 'node'.

Log :
2016-01-20 12:03:02.404 ***** ERROR ***** HACK ================================================================
2016-01-20 12:03:02.404 ***** ERROR ***** Try to hack detected
2016-01-20 12:03:02.404 ***** ERROR ***** Source Code = Value 'on' is not a numeric integer
2016-01-20 12:03:02.404 ***** ERROR ***** QUERY_STRING = destinationWidth=48&destinationHeight=0&isIE=
2016-01-20 12:03:02.404 ***** ERROR ***** REMOTE_ADDR = 127.0.0.1
2016-01-20 12:03:02.404 ***** ERROR ***** SCRIPT_FILENAME = /var/www/html/projeqtor/tool/saveObject.php
2016-01-20 12:03:02.404 ***** ERROR ***** REQUEST_URI = /projeqtor/tool/saveObject.php?destinationWidth=48&destinationHeight=0&isIE=

Please Log in or Create an account to join the conversation.

More
20 Jan 2016 19:48 #2 by babynus
Replied by babynus on topic Hack detected when saving Periodic meeting
Issue recorded as Ticket #1943
and fixed.
Fix is to replace checkValidInteger function in /model/Security.php like this :
public static function checkValidInteger($integer) {
    if ($integer===null or $integer==='' or trim($integer)==='' or $integer=='NaN') return; //allow null or empty value
    if ($integer=='on') return 1;
    if ($integer=='off') return 0;
    if (! is_numeric($integer)) {
      traceHack("Value '$integer' is not a numeric integer");
    }
    return intval($integer);
  }
Babynus
Administrator of ProjeQtOr web site
The following user(s) said Thank You: youch

Please Log in or Create an account to join the conversation.

Moderators: babynus, protion
Time to create page: 0.028 seconds

Cookies settings

×

Functional Cookies

Ce site utilise des cookies pour assurer son bon fonctionnement et ne peuvent pas être désactivés de nos systèmes. Nous ne les utilisons pas à des fins publicitaires. Si ces cookies sont bloqués, certaines parties du site ne pourront pas fonctionner.

Session

Please login to see yours activities!

Other cookies

Ce site web utilise un certain nombre de cookies pour gérer, par exemple, les sessions utilisateurs.

Login Form