Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

Try to hack detecte...
 
Notifications
Clear all

Try to hack detected when trying to save ticket with attachment

13 Posts
3 Users
0 Reactions
1,928 Views
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 
[#9938]

It seems that I am getting a "TRY TO HACK DETECTED"  notification email when attempting to save some tickets.   (It does not always occur)

The email contains the following:HACK ================================================================
Try to hack detected
Source Code = SqlElement->_construct : id '.' is not numeric for class DocumentVersion
QUERY_STRING = csrfToken=&destinationWidth=960&destinationHeight=100&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758548948173&csrfToken=
REMOTE_ADDR = 10.203.1.98
SCRIPT_FILENAME = C:/Program Files (x86)/EasyPHP-Devserver-17/eds-www/projeqtor/tool/saveObject.php
REQUEST_URI = /projeqtor/tool/saveObject.php?csrfToken=&destinationWidth=960&destinationHeight=100&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758548948173&csrfToken=

Any insight or help would be appreciated.

Thanks in advance.

 


 
Posted : 22 Sep 2025 18H08
Damian
(@damian-sd)
Posts: 119
Active Member Admin Registered
 

Thanks for your report, we have created a ticket #10576 for this issue and will fix this on next patch.


 
Posted : 23 Sep 2025 16H06
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 

What can be done in the meantime? Anything?


 
Posted : 23 Sep 2025 18H35
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 

Where can i follow the ticket progress?


 
Posted : 23 Sep 2025 18H44
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

On  https://track.projeqtor.org


 
Posted : 23 Sep 2025 19H37
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Are you sure the issue occurs when saving Ticket ?
Log says "id '.' is not numeric for class DocumentVersion"


 
Posted : 23 Sep 2025 19H40
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

And what version are you using ?
I see empty csrfToken at end of URL.
This cannot be the case on latest stable release V12.2.3.
We bring some free support only on latest stable release (want to avoid loosing time on already fixed issues).
So consider migrating to latest stable release or subscribe to professional support (to get some support on older versions)


 
Posted : 23 Sep 2025 19H42
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 

I am on version: V10.3.4


 
Posted : 23 Sep 2025 19H46
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 

Is there a good reliable guide for UPDATING VERSION. 

​​​​​​​I cannot afford lose my data and ticket system if I upgrade versions.


 
Posted : 23 Sep 2025 19H48
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 

Understood. And best practice would be to utilize the latest stable release.

This was one of the latest logged events:

2025-09-23 10:37:30.449 ** ERROR ** [V10.3.4] HACK ================================================================
2025-09-23 10:37:30.450 ** ERROR ** [V10.3.4] Try to hack detected
2025-09-23 10:37:30.451 ** ERROR ** [V10.3.4] Source Code = SqlElement->_construct : id '.' is not numeric for class DocumentVersion
2025-09-23 10:37:30.452 ** ERROR ** [V10.3.4] QUERY_STRING = csrfToken=&destinationWidth=50&destinationHeight=0&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758638247403&csrfToken=
2025-09-23 10:37:30.454 ** ERROR ** [V10.3.4] REMOTE_ADDR = 10.203.1.98
2025-09-23 10:37:30.455 ** ERROR ** [V10.3.4] SCRIPT_FILENAME = C:/Program Files (x86)/EasyPHP-Devserver-17/eds-www/projeqtor/tool/saveObject.php
2025-09-23 10:37:30.456 ** ERROR ** [V10.3.4] CONNECTED USER = #3 - NPIETROSANTI
2025-09-23 10:37:30.456 ** ERROR ** [V10.3.4] === Trace Stack for last error ===
2025-09-23 10:37:30.457 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtortoolprojeqtor.php at line 1691 calling debugPrintTraceStack()
2025-09-23 10:37:30.458 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 779 calling traceHack()
2025-09-23 10:37:30.459 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelDocumentVersionMain.php at line 88 calling SqlElement:__construct()
2025-09-23 10:37:30.460 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelDocumentVersion.php at line 39 calling DocumentVersionMain:__construct()
2025-09-23 10:37:30.461 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 6073 calling DocumentVersion:__construct()
2025-09-23 10:37:30.462 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 1342 calling SqlElement:sendMailIfMailable()
2025-09-23 10:37:30.463 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelpersistenceSqlElement.php at line 853 calling SqlElement:saveSqlElement()
2025-09-23 10:37:30.463 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtormodelTicketMain.php at line 504 calling SqlElement:save()
2025-09-23 10:37:30.464 ** ERROR ** [V10.3.4] => C:Program Files (x86)EasyPHP-Devserver-17eds-wwwprojeqtortoolsaveObject.php at line 124 calling TicketMain:save()
2025-09-23 10:37:30.465 ** ERROR ** [V10.3.4] ===
2025-09-23 10:37:30.466 ** ERROR ** [V10.3.4] REQUEST_URI = /projeqtor/tool/saveObject.php?csrfToken=&destinationWidth=50&destinationHeight=0&isIE=&xhrPostDestination=resultDivMain&xhrPostIsResultMessage=true&xhrPostValidationType=&xhrPostTimestamp=1758638247403&csrfToken=


 
Posted : 23 Sep 2025 19H52
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

We do not provide free support on this forum for old version.
We only support latest stable (current is V12.2.3)
Only way to get some support on old version is to subscribe to our professional support.


 
Posted : 29 Sep 2025 21H05
(@catalystdroid)
Posts: 38
Active Member
Topic starter
 

Is there a guide for updating ?


 
Posted : 07 Oct 2025 21H24
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
Share:

Scroll to Top