Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

[SOLVED] Hack detec...
 
Notifications
Clear all

[SOLVED] Hack detected when saving Periodic meeting

2 Posts
2 Users
0 Reactions
4,138 Views
(@youch)
Posts: 5
Active Member
Topic starter
 
[#2940]

Hello,
With Projeqtor V5.2.1, when saving a new or existing periodic meeting :

Error displaying :
Erreur sur finalizeMessageDisplay('resultDiv') :
La destination n'est pas un 'node' ou pas un 'widget'
ou lastOperation or lastOperationStatus n'est pas un 'node'.

Log :
2016-01-20 12:03:02.404 ** ERROR ** HACK ================================================================
2016-01-20 12:03:02.404 ** ERROR ** Try to hack detected
2016-01-20 12:03:02.404 ** ERROR ** Source Code = Value 'on' is not a numeric integer
2016-01-20 12:03:02.404 ** ERROR ** QUERY_STRING = destinationWidth=48&destinationHeight=0&isIE=
2016-01-20 12:03:02.404 ** ERROR ** REMOTE_ADDR = 127.0.0.1
2016-01-20 12:03:02.404 ** ERROR ** SCRIPT_FILENAME = /var/www/html/projeqtor/tool/saveObject.php
2016-01-20 12:03:02.404 ** ERROR ** REQUEST_URI = /projeqtor/tool/saveObject.php?destinationWidth=48&destinationHeight=0&isIE=


 
Posted : 20 Jan 2016 14H05
(@babynus)
Posts: 14952
Member Admin
 

Issue recorded as Ticket #1943
and fixed.
Fix is to replace checkValidInteger function in /model/Security.php like this :

  public static function checkValidInteger($integer) {
    if ($integer===null or $integer==='' or trim($integer)==='' or $integer=='NaN') return; //allow null or empty value
    if ($integer=='on') return 1;
    if ($integer=='off') return 0;
    if (! is_numeric($integer)) {
      traceHack("Value '$integer' is not a numeric integer");
    }
    return intval($integer);
  }

 
Posted : 20 Jan 2016 21H48
Share:

Scroll to Top