Forum

Try to hack detecte...
 
Notifications
Retirer tout

Try to hack detected when trying to save ticket with attachment

13 Posts
3 Utilisateurs
0 Reactions
1,886 Vu
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 
[#9938]

It seems that I am getting a "TRY TO HACK DETECTED"  notification email when attempting to save some tickets.   (It does not always occur)

The email contains the following:HACK ================================================================
Try to hack detected
Source Code = SqlElement->_construct : id '.' is not numeric for class DocumentVersion
QUERY_STRING = csrfToken=&destinationWidth=960&destinationHeight=100&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758548948173&csrfToken=
REMOTE_ADDR = 10.203.1.98
SCRIPT_FILENAME = C:/Program Files (x86)/EasyPHP-Devserver-17/eds-www/projeqtor/tool/saveObject.php
REQUEST_URI = /projeqtor/tool/saveObject.php?csrfToken=&destinationWidth=960&destinationHeight=100&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758548948173&csrfToken=

Any insight or help would be appreciated.

Thanks in advance.

 


 
Posté : 22/09/2025 6:08 pm
Damian
(@damian-sd)
Posts: 119
Membre Admin Registered
 

Thanks for your report, we have created a ticket #10576 for this issue and will fix this on next patch.


 
Posté : 23/09/2025 4:06 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

What can be done in the meantime? Anything?


 
Posté : 23/09/2025 6:35 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

Where can i follow the ticket progress?


 
Posté : 23/09/2025 6:44 pm
(@babynus)
Posts: 14952
Membre Admin
 

On  https://track.projeqtor.org


 
Posté : 23/09/2025 7:37 pm
(@babynus)
Posts: 14952
Membre Admin
 

Are you sure the issue occurs when saving Ticket ?
Log says "id '.' is not numeric for class DocumentVersion"


 
Posté : 23/09/2025 7:40 pm
(@babynus)
Posts: 14952
Membre Admin
 

And what version are you using ?
I see empty csrfToken at end of URL.
This cannot be the case on latest stable release V12.2.3.
We bring some free support only on latest stable release (want to avoid loosing time on already fixed issues).
So consider migrating to latest stable release or subscribe to professional support (to get some support on older versions)


 
Posté : 23/09/2025 7:42 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

I am on version: V10.3.4


 
Posté : 23/09/2025 7:46 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

Is there a good reliable guide for UPDATING VERSION. 

​​​​​​​I cannot afford lose my data and ticket system if I upgrade versions.


 
Posté : 23/09/2025 7:48 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

Understood. And best practice would be to utilize the latest stable release.

This was one of the latest logged events:

2025-09-23 10:37:30.449 ** ERROR ** [V10.3.4] HACK ================================================================
2025-09-23 10:37:30.450 ** ERROR ** [V10.3.4] Try to hack detected
2025-09-23 10:37:30.451 ** ERROR ** [V10.3.4] Source Code = SqlElement->_construct : id '.' is not numeric for class DocumentVersion
2025-09-23 10:37:30.452 ** ERROR ** [V10.3.4] QUERY_STRING = csrfToken=&destinationWidth=50&destinationHeight=0&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758638247403&csrfToken=
2025-09-23 10:37:30.454 ** ERROR ** [V10.3.4] REMOTE_ADDR = 10.203.1.98
2025-09-23 10:37:30.455 ** ERROR ** [V10.3.4] SCRIPT_FILENAME = C:/Program Files (x86)/EasyPHP-Devserver-17/eds-www/projeqtor/tool/saveObject.php
2025-09-23 10:37:30.456 ** ERROR ** [V10.3.4] CONNECTED USER = #3 - NPIETROSANTI
2025-09-23 10:37:30.456 ** ERROR ** [V10.3.4] === Trace Stack for last error ===
2025-09-23 10:37:30.457 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtortoolprojeqtor.php at line 1691 calling debugPrintTraceStack()
2025-09-23 10:37:30.458 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 779 calling traceHack()
2025-09-23 10:37:30.459 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelDocumentVersionMain.php at line 88 calling SqlElement:__construct()
2025-09-23 10:37:30.460 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelDocumentVersion.php at line 39 calling DocumentVersionMain:__construct()
2025-09-23 10:37:30.461 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 6073 calling DocumentVersion:__construct()
2025-09-23 10:37:30.462 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 1342 calling SqlElement:sendMailIfMailable()
2025-09-23 10:37:30.463 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 853 calling SqlElement:saveSqlElement()
2025-09-23 10:37:30.463 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelTicketMain.php at line 504 calling SqlElement:save()
2025-09-23 10:37:30.464 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtortoolsaveObject.php at line 124 calling TicketMain:save()
2025-09-23 10:37:30.465 ** ERROR ** [V10.3.4] ===
2025-09-23 10:37:30.466 ** ERROR ** [V10.3.4] REQUEST_URI = /projeqtor/tool/saveObject.php?csrfToken=&destinationWidth=50&destinationHeight=0&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758638247403&csrfToken=


 
Posté : 23/09/2025 7:52 pm
(@babynus)
Posts: 14952
Membre Admin
 

We do not provide free support on this forum for old version.
We only support latest stable (current is V12.2.3)
Only way to get some support on old version is to subscribe to our professional support.


 
Posté : 29/09/2025 9:05 pm
(@catalystdroid)
Posts: 38
Trusted Member
Début du sujet
 

Is there a guide for updating ?


 
Posté : 07/10/2025 9:24 pm
(@babynus)
Posts: 14952
Membre Admin
Share:
Retour en haut