RE: [Phpgedview-talk] attack attempt

[John F. <Joh...@ne...>]

If you are using index files you will need to manually edit the
index/authenticate.php file and remove the user entry that was just
added.  It should be the last entry in the list.  Before you make this
change can your forward your authenticate.php file to me at john.finlay
at neumont.edu.  It will help me try to figure out what he is trying to
do by creating these users.  So far I haven't seen any problem other
than annoyance on mysql sites, but it could cause more problems on a
site running index mode.

=20

--John

=20

=20

________________________________

From: php...@li...
[mailto:php...@li...] On Behalf Of Rodney
Hall
Sent: Tuesday, December 20, 2005 3:57 PM
To: php...@li...
Subject: RE: [Phpgedview-talk] attack attempt

=20

I have been hit by this attack and uploaded the patch files.

However, when I try to log onto my site all I get is:

=20

Parse error: parse error, unexpected T_STRING in
/home/domain/domain60/web/tree2/index/authenticate.php on line 370

=20

How can I cure this please? Replacing the file from disk does not work.
v3.4

--
Rodney HALL
Heywood, Lancashire

Suaviter sed fortiter
Agreeably but powerfully
~~~~~~~~~~~~~~
rm...@rm...
http://rmhh.co.uk/
http://rmhh.org.uk/
~~~~~~~~~~~~~~~

=20

=20

=20

________________________________

From: php...@li...
[mailto:php...@li...] On Behalf Of John
Finlay
Sent: 20 December 2005 22:35
To: php...@li...
Subject: RE: [Phpgedview-talk] attack attempt

You will need to manually delete the suntzu user from the pgv_users
table.

=20

--John

=20

________________________________

From: php...@li...
[mailto:php...@li...] On Behalf Of S.C.
Gehl
Sent: Tuesday, December 20, 2005 3:33 PM
To: php...@li...
Subject: Re: [Phpgedview-talk] attack attempt

=20

When I went to goto user admin and delete him, i got this error;

ERROR 8: Undefined index:
lang_name_english\';error_reporting(0);if(isset($suntzu)){sy
0 Error occurred on in function unknown
1 called from line 713 of file useradmin.php

Notice: Undefined index:
lang_name_english\';error_reporting(0);if(isset($suntzu)){sy in
/www/html/phpGedView/useradmin.php on line 713

ERROR 8: Undefined index:
english\';error_reporting(0);if(isset($suntzu)){sy
0 Error occurred on in function unknown
1 called from line 713 of file useradmin.php

Notice: Undefined index:
english\';error_reporting(0);if(isset($suntzu)){sy in
/www/html/phpGedView/useradmin.php on line 713

ERROR 8: Undefined index:
lang_name_english\';error_reporting(0);if(isset($suntzu)){sy
0 Error occurred on in function unknown
1 called from line 713 of file useradmin.php

Notice: Undefined index:
lang_name_english\';error_reporting(0);if(isset($suntzu)){sy in
/www/html/phpGedView/useradmin.php on line 713

ERROR 8: Undefined index:
lang_name_english\';error_reporting(0);if(isset($suntzu)){sy
0 Error occurred on in function unknown
1 called from line 713 of file useradmin.php

Notice: Undefined index:
lang_name_english\';error_reporting(0);if(isset($suntzu)){sy in
/www/html/phpGedView/useradmin.php on line 713

I run my own server via dynamic DNS... I closed my firewall in time i
hope, I'll let you know.

--=20
---S.C. Gehl, 'Beauty to Burn'=20