Author Topic: Code injection  (Read 678 times)

Offline svsanchez

  • Posts: 449
Code injection
« on: July 02, 2018, 07:56:38 PM »
Hello everybody, I have a problem which appears to be code injection in some part of WB. I'm not posting the affected domain as I don't want it to be the target of "attacks". The site is built with WB 2.8.3 rev 1638, I didn't upgrade it in the past because it's a very big site which uses the members module for most of it's pages and was very affraid of breaking the site since not all modules are updated regularly.

Can you please tell me:

1) Is the members module compatible with WB 2.10?
2) Will the code injection be removed only by upgrading?

I just tried to upgrade a smaller site from 2.8.3 rev 1638 to 2.8.3 rev 1645 but I'm having problems with the wysiwyg after the upgrade.

Thanks for all your help!

Offline hgs

  • Betatester
  • **
  • Posts: 920
    • EFG MG
Re: Code injection
« Reply #1 on: July 03, 2018, 08:00:59 AM »
Quote
1) Is the members module compatible with WB 2.10?
I just successfully tested the module with php 7.2 under the current version of WebsiteBaker (2.12).

Quote
2) Will the code injection be removed only by upgrading?
I do not think an upgrade removes the code injection.
LG Harald

"Fange nie an, aufzuhören - höre nie auf, anzufangen." Marcus Tullius Cicero (106-43 v.Chr.)

Offline dbs

  • Betatester
  • **
  • Posts: 7553
  • Gender: Male
  • tioz4ever
    • WebsiteBaker - jQuery-Plugins - Module - Droplets - Tests
Re: Code injection
« Reply #2 on: July 03, 2018, 08:10:01 AM »
Hi, a short test with Members 0.8.3 looks good.
2 messages with preprocess, but you can comment out or delete the lines 132 & 352 in view.php
That's not necessary anymore.
Code: [Select]
$wb->preprocess(...);
@ 2.
No one can know where and what code was inserted.
For this cases you have to restore a backup from the time before.

You can testing a upgrade, but without warranty.
Upgrades should be done in a test environment. You have a answer if you find new code or not.


edit: latest members version is 0.8.8. by jacobi22 and there are no preprocess code pieces. Use it.
« Last Edit: July 03, 2018, 08:23:55 AM by dbs »

Offline crnogorac081

  • Posts: 1879
  • Gender: Male
Re: Code injection
« Reply #3 on: July 03, 2018, 08:33:31 AM »
it would be easier to pm us which file si affected so we can have a look
no bb in signature

Offline svsanchez

  • Posts: 449
Re: Code injection
« Reply #4 on: July 03, 2018, 07:19:10 PM »
Hello, thank you all for your replies and for taking the time to test the members module with the newest versions of WB, I'm so happy to hear that it works :)

Regarding the code injection... unfortunately I have no idea when this code was injected or what it looks like. I just noticed that my site keeps calling some ad code (which seems to be blocked) in a never ending loop. I don't know if the code is injected in the WB files or in the database, if that is possible.

If it were injected in the WB files then I could just replace them with the same files I have on my PC and then start with the upgrade process. But if it is in the database I have no idea how to check for it and remove it.

Thank you crnogorac081 for the pm option. When you say pm us, who do you mean by "us"? That would be you and?

Offline crnogorac081

  • Posts: 1879
  • Gender: Male
Re: Code injection
« Reply #5 on: July 03, 2018, 07:35:48 PM »
any experienced wb user that is willing to help, starting from the pwople who reactwd on your thread.
no bb in signature

Offline svsanchez

  • Posts: 449
Re: Code injection
« Reply #6 on: July 03, 2018, 08:05:49 PM »
Hello crnogorac081, thanks again. I just pm'd you with the details of the site and problem.

Offline evaki

  • Posts: 2220
Re: Code injection
« Reply #7 on: July 04, 2018, 10:08:05 AM »
==========  I am on a journey ============
============  quick check ==============

WB2.12, Server:Embedded (php-CLI)_v.7.2
Members v.0.8.8 (Details: v.0.8.7 - Website Baker 2.7.x)

Code: [Select]
After installing and calling up the page (FF)
"created: [Wed, 04 Jul 2018 07:34:10 +0000]
Wed, 04 Jul 2018 07:35:15 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:35:15 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:35:15 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links""

One member deleted
Wed, 04 Jul 2018 07:45:04 +0000 [E_WARNING] \modules\members\delete_group.php:[68] from \modules\members\delete_group.php:[68] include "include(tidy_up.inc.php): failed to open stream: No such file or directory"


Application error message
URL encoded GET input string was set to hello3926%C0%BEz1%C0%BCz2a%90bcxuca3926
Error message found: You have an error in your SQL syntax
Affected items /search/index.php

SQL injection (possibly vulnerable !)
1. subsequent faults???)
This vulnerability affects /search/index.php.

Php errors (Errors during the audit)
 
php_error.log
"created: [Wed, 04 Jul 2018 07:47:32 +0000]
Wed, 04 Jul 2018 07:49:52 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:49:52 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:49:52 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:49:58 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:49:58 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:49:58 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
============================================================
============================================================

Wed, 04 Jul 2018 07:49:58
CLI CRASHs Injection may be successful (The consequences ?)
Wed, 04 Jul 2018 07:51:30
============================================================
Wed, 04 Jul 2018 07:51:30 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:51:30 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:51:37 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:51:37 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:51:37 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:51:39 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:51:39 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:51:39 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:51:40 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:51:40 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:51:40 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:52:34 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:34 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:34 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:34 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:34 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:34 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:37 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:45 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:45 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:46 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:46 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:48 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:48 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:49 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:49 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:51 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:51 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:52 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:52 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:53 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:53 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:52:55 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:52:55 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:35 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:36 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:38 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:39 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:40 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:41 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:42 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:43 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:44 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:45 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:45 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:45 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:45 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:46 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:46 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:46 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:46 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:47 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:48 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:48 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:49 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:49 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:49 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:49 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:50 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:50 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:52 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:52 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:53 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:53 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:54 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:54 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:54:56 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): The session id is too long or contains illegal characters, valid characters are a-z, A-Z, 0-9 and '-,'"
Wed, 04 Jul 2018 07:54:56 +0000 [E_WARNING] \framework\initialize.php:[491] from \config.php:[21] require_once "session_start(): Failed to read session data: files (path: \tmp)"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[361] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: reversesorting"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[368] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links"
Wed, 04 Jul 2018 07:56:35 +0000 [E_NOTICE] \modules\members\view.php:[372] from \templates\DefaultTemplate\index.php:[34] page_content "Undefined variable: listgroup_links""
« Last Edit: July 04, 2018, 10:18:44 AM by evaki »
Einmal Pizza Quattro Stagioni bitte, aber ohne Herbst.

Offline svsanchez

  • Posts: 449
Re: Code injection
« Reply #8 on: July 04, 2018, 08:26:43 PM »
@evaki:

Hello, I'm sorry but I'm not a programmer. Does that mean that the members module is vulnerable in WB 2.12?

Offline evaki

  • Posts: 2220
Re: Code injection
« Reply #9 on: July 05, 2018, 07:04:25 AM »
(I am on a journey)


The information is intended for the module author

A successor module is recommended "Itemz"
Code: [Select]
https://wbce.at/de/topics/itemz.php
Whether "Itemz" works under "WB"?
Is there a dialogue in English?
Questions upon questions...
Reg./MfG. Evaki
Einmal Pizza Quattro Stagioni bitte, aber ohne Herbst.

Offline grindmobil

  • Posts: 1
Re: Code injection
« Reply #10 on: July 05, 2018, 09:46:38 PM »
Evakis Error Report says:
There are some minor Errors with undefined variables in Members and a missing TidyUp-Script, if you delete groups (which is also minor, because the same script is started, if you delete an item.)

Itemz is a kind of fork of members, and i didnt care about members anymore then. So all fixes in members are made by others.

Itemz runs with WB also, but the english language files are not very "fresh"...

Uhh! I see: the english help is completely out of date...
« Last Edit: July 05, 2018, 10:01:33 PM by grindmobil »

Offline crnogorac081

  • Posts: 1879
  • Gender: Male
Re: Code injection
« Reply #11 on: July 05, 2018, 11:31:55 PM »
btw, injection here is reffered to code injected by ads.. nkt xs injection..
no bb in signature

 

postern-length