Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.
Hi,
I've received two emails today from the Projeqtor application with the subject line: "Try to hack detected.".
Please refer to the below log.
2025-05-17 19:09:00.092 ** ERROR ** [V12.1.2] [30] HACK ================================================================
2025-05-17 19:09:00.093 ** ERROR ** [V12.1.2] [30] Try to hack detected
2025-05-17 19:09:00.093 ** ERROR ** [V12.1.2] [30] Source Code = Cross-site scripting detected calling /projeqtor/tool/checkAlertToDisplay.php
2025-05-17 19:09:00.093 ** ERROR ** [V12.1.2] [30] QUERY_STRING = csrfToken=7dff8e75e488e13b69867f5494fcda5c3315c656a46b8a1838014d082d8b34c6c4c611&directAccessIndex=
2025-05-17 19:09:00.094 ** ERROR ** [V12.1.2] [30] REMOTE_ADDR = 192.xxx.xx.231
2025-05-17 19:09:00.094 ** ERROR ** [V12.1.2] [30] SCRIPT_FILENAME = C:/Apache24/htdocs/projeqtor/tool/checkAlertToDisplay.php
2025-05-17 19:09:00.094 ** ERROR ** [V12.1.2] [30] CONNECTED USER = #30 - rxxxxxxxxxxi@mxxxxxxxc.com
2025-05-17 19:09:00.095 ** ERROR ** [V12.1.2] [30] === Trace Stack for last error ===
2025-05-17 19:09:00.095 ** ERROR ** [V12.1.2] [30] => C:Apache24htdocsprojeqtortoolprojeqtor.php at line 1709 calling debugPrintTraceStack()
2025-05-17 19:09:00.095 ** ERROR ** [V12.1.2] [30] => C:Apache24htdocsprojeqtortoolprojeqtor.php at line 246 calling traceHack()
2025-05-17 19:09:00.095 ** ERROR ** [V12.1.2] [30] => C:Apache24htdocsprojeqtortoolcheckAlertToDisplay.php at line 29 calling require_once()
2025-05-17 19:09:00.096 ** ERROR ** [V12.1.2] [30] ===
2025-05-17 19:09:00.096 ** ERROR ** [V12.1.2] [30] REQUEST_URI = /projeqtor/tool/checkAlertToDisplay.php?csrfToken=7dff8e75e488e13b69867f5494fcda5c3315c656a46b8a1838014d082d8b34c6c4c611&directAccessIndex=
2025-05-17 19:09:18.527 ** ERROR ** [V12.1.2] [30] HACK ================================================================
2025-05-17 19:09:18.527 ** ERROR ** [V12.1.2] [30] Try to hack detected
2025-05-17 19:09:18.528 ** ERROR ** [V12.1.2] [30] Source Code = Cross-site scripting detected calling /projeqtor/tool/jsonNotification.php
2025-05-17 19:09:18.528 ** ERROR ** [V12.1.2] [30] QUERY_STRING = csrfToken=7dff8e75e488e13b69867f5494fcda5c3315c656a46b8a1838014d082d8b34c6c4c611&directAccessIndex=
2025-05-17 19:09:18.528 ** ERROR ** [V12.1.2] [30] REMOTE_ADDR = 192.xxx.xx.231
2025-05-17 19:09:18.529 ** ERROR ** [V12.1.2] [30] SCRIPT_FILENAME = C:/Apache24/htdocs/projeqtor/tool/jsonNotification.php
2025-05-17 19:09:18.529 ** ERROR ** [V12.1.2] [30] CONNECTED USER = #30 - rxxxxxxxxxxi@mxxxxxxxc.com
2025-05-17 19:09:18.530 ** ERROR ** [V12.1.2] [30] === Trace Stack for last error ===
2025-05-17 19:09:18.530 ** ERROR ** [V12.1.2] [30] => C:Apache24htdocsprojeqtortoolprojeqtor.php at line 1709 calling debugPrintTraceStack()
2025-05-17 19:09:18.530 ** ERROR ** [V12.1.2] [30] => C:Apache24htdocsprojeqtortoolprojeqtor.php at line 246 calling traceHack()
2025-05-17 19:09:18.531 ** ERROR ** [V12.1.2] [30] => C:Apache24htdocsprojeqtortooljsonNotification.php at line 30 calling require_once()
2025-05-17 19:09:18.531 ** ERROR ** [V12.1.2] [30] ===
2025-05-17 19:09:18.531 ** ERROR ** [V12.1.2] [30] REQUEST_URI = /projeqtor/tool/jsonNotification.php?csrfToken=7dff8e75e488e13b69867f5494fcda5c3315c656a46b8a1838014d082d8b34c6c4c611&directAccessIndex=
Could you please advise if this is something that requires my attention, or guide me on the appropriate next steps?Thank you for your assistance.
Best regards,
Connected users using old version of code after migration ?
Hi,
Could you please provide more details about your question? I’m not sure I fully understand what you mean regarding the migration and the version of the code.
Thank you!
Try to hack in on checkAlertToDisplay.
This is called every 30 seconds from every browser connected to projeqtor.
Since V12.1, we activated CSRF token control.
Users conected with old version don't have the token so they are disconnected.