Adware, malware, spyware, hijacker discussion and information

[Gain Knowledge]  [Install Prevention]  [Maintain Security]  [Spyware Removal Help]


It is currently Sat Jul 31, 2010 2:03 pm

All times are UTC - 7 hours




Post new topic Reply to topic  [ 24 posts ] 
Author Message
 Post subject: Sooo many questions...
PostPosted: Sat Apr 18, 2009 11:32 am 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
Please forgive me if I am asking things that I should know or whatever, but I have no idea what's going wrong for me...

So, we installed Spambot Search Tool v0.27 which I think is the current one.

Also, we installed the php code for phpbb 3.0 and that didn't cause any errors. We did change the location of the folder in the code to that of our site so that seems fine...

But here are our issues...

1) When we click the link in the tool to view spammers we get this error: Error: Cannot query database ....

So checking our settings we have this:

Code:
// Do you want it to log results to a database?
$bln_SaveToDB   = TRUE;

// Insert database/host details here
$dbShost   = 'mysql.succubus.net';
$dbSname   = 'sbst';
$dbSusername   = 'USERIDHIDDEN';
$dbSpassword   = 'USERPASSWORDHIDDEN';


Apparently this is wrong, but I have no idea why. The username and password are correct as is the database name and host as far as I can see. I do know that the database name I had to alter from uppercase to lower case because our host wouldn't accept all uppercase.

2) When clicking on view reports, we get the error:

Code:
Warning: imap_open() [function.imap-open]: Couldn't open stream {imap.gmail.com:993/imap/ssl}INBOX in /home/.galilee/terasuccubi/succubus.net/forum/check_spammers/Check_Spammers/view_spammers_mail.php on line 25
Can't connect: Certificate failure for imap.gmail.com: unable to get local issuer certificate: /C=US/O=Google Inc/CN=Google Internet Authority


The settings we have are:

Code:
// E-mail
//
// Note: This is only required if you want to view reports sent to you via e-mail
$sMail='queenofthesuccubi@gmail.com';
$sMailPW='CORRECTPASSWORDHIDDEN';
$sMailServer='{imap.gmail.com:993/imap/ssl}INBOX';


I can't figure out that error either...

3) Looking at the Email from our forum when a spammer is rejected, at least I assume they are, there is the following error in the Email server:

<your@email.addr>: [email.addr]: Name or service not known

Where is that in the files that it needs to be entered?


4) With regards to the spambots folder and the counter.txt file, do we CHMOD them both to 777 or something else? And do you have to make a file in the spambots folder for the program to start writing to it? Is that the counter.txt file? Do we move it there?



Sorry for the massive amount of questions, but we really would love to have this working correctly...


Otherwise, I have a request for consideration for other software to write code for this tool to connect to...

One is MediaWiki, the other is the Coppermine photo album system... Coppermine especially as that has no protection at all really...

Thank you for your time!!


<huggles>


Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sat Apr 18, 2009 1:49 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
TeraS wrote:
1) When we click the link in the tool to view spammers we get this error: Error: Cannot query database ....

So checking our settings we have this:

Code:
// Do you want it to log results to a database?
$bln_SaveToDB   = TRUE;

// Insert database/host details here
$dbShost   = 'mysql.succubus.net';
$dbSname   = 'sbst';
$dbSusername   = 'USERIDHIDDEN';
$dbSpassword   = 'USERPASSWORDHIDDEN';


Apparently this is wrong, but I have no idea why. The username and password are correct as is the database name and host as far as I can see. I do know that the database name I had to alter from uppercase to lower case because our host wouldn't accept all uppercase.


Can you check if the database has actually been created?

TeraS wrote:
2) When clicking on view reports, we get the error:

Code:
Warning: imap_open() [function.imap-open]: Couldn't open stream {imap.gmail.com:993/imap/ssl}INBOX in /home/.galilee/terasuccubi/succubus.net/forum/check_spammers/Check_Spammers/view_spammers_mail.php on line 25
Can't connect: Certificate failure for imap.gmail.com: unable to get local issuer certificate: /C=US/O=Google Inc/CN=Google Internet Authority


The settings we have are:

Code:
// E-mail
//
// Note: This is only required if you want to view reports sent to you via e-mail
$sMail='queenofthesuccubi@gmail.com';
$sMailPW='CORRECTPASSWORDHIDDEN';
$sMailServer='{imap.gmail.com:993/imap/ssl}INBOX';


I can't figure out that error either...


This is caused when a certificate isn't matching (as seems to be the case here). Can you add the following after "/ssl";

/novalidate-cert

This will tell PHP to ignore certificate errors.

TeraS wrote:
3) Looking at the Email from our forum when a spammer is rejected, at least I assume they are, there is the following error in the Email server:

<your@email.addr>: [email.addr]: Name or service not known

Where is that in the files that it needs to be entered?


This is actually in the mod itself (the one you added to the phpBB forum code). The line to look for is just after the $msg line, and contains;

Code:
$to = "your@email.addr";


TeraS wrote:
4) With regards to the spambots folder and the counter.txt file, do we CHMOD them both to 777 or something else? And do you have to make a file in the spambots folder for the program to start writing to it? Is that the counter.txt file? Do we move it there?


777 will be fine, and nope, no file has to pre-exist in the spambots folder :)

TeraS wrote:
Sorry for the massive amount of questions, but we really would love to have this working correctly...


Otherwise, I have a request for consideration for other software to write code for this tool to connect to...

One is MediaWiki, the other is the Coppermine photo album system... Coppermine especially as that has no protection at all really...

Thank you for your time!!


<huggles>


Tera


No problem at all, just glad to help :)

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sat Apr 18, 2009 4:38 pm 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
Thank you for the answers!

1) The database was created, but I did that manually using the sql code found in the forum. The program would not create the database itself, so I created the database and then populated it with the needed entries...

2) Added the /novalidate-cert to the php and the error is gone. Waiting to see what happens next....

3) Email addy added...

4) OK, then I have a question, why would a text file not be created in the folder for the info?


Thank you for the support!



Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun Apr 19, 2009 2:36 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
TeraS wrote:
1) The database was created, but I did that manually using the sql code found in the forum. The program would not create the database itself, so I created the database and then populated it with the needed entries...


It seems I may have forgotten to remove the comment ("//") lines from all except one of the lines that adds the entries to the database, so unless the spammer was listed in fSpamlist, it wouldn't have known to do anything with the DB. I've attached a fresh copy of the two files (check_spammers.php and check_spammers_plain.php). Can you replace your copy with these and let me know if it resolves the issue?

TeraS wrote:
2) Added the /novalidate-cert to the php and the error is gone. Waiting to see what happens next....


If it's resolved the issue, you should now be able to view the e-mails it sent to you via the web interface :)

TeraS wrote:
4) OK, then I have a question, why would a text file not be created in the folder for the info?


The only reasons I've found that cause this are, the spambots folder isnt writable, file_put_contents() is not available (your host can confirm this for you), or the $bln_SaveToFile var isn't set to true in config.php.

TeraS wrote:
Thank you for the support!


No thanks necessary, it's a pleasure :)


Attachments:
File comment: v0.27 Patched files
check_spammers_plain.zip [9.02 KiB]
Downloaded 30 times

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!
Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun Apr 19, 2009 8:50 am 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
Replaced both files but the error remains there...

Sorry to be a pain!


Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun Apr 19, 2009 10:32 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
No apology necessary. Unless your MySQL server requires some different connection methods, I'm a little unsure as to what to suggest at this point (other than disabling the saving to DB).

I'll keep looking into it and see what I can find :)

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun Apr 19, 2009 1:30 pm 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
Not sure if this helps you or not but....


http://wiki.dreamhost.com/MySQL

From my hosting service's wiki...


Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun Apr 19, 2009 7:08 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
From what I am seeing, they don't require anything particularly special, so if phpMyAdmin/phpBB3 can connect to it, there's no reason this shouldn't be doing either.

If possible, could you check your phpBB3's config file, to ensure the connection details are the same as those specified for the SBST please?

Interesting site btw ;)

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Tue Apr 21, 2009 1:16 pm 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
<blush>

Thank you for the compliment!

I checked the config file for phpBB and sbst and they are the same...

I have put in a request ticket with our hosting service for some ideas... Mebby they have seen this before...

In spamming news, our gallery was hit with 20 spam comments from an IP this afternoon...

Coppermine really really really needs an antispam system...

<huggles>

Thank you so much for your help!


Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Tue Apr 21, 2009 1:41 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
Thanks for letting me know :)

I'm not actually familiar with coppermine, but I'll take a look at it and see what I can do :)

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Wed Apr 22, 2009 8:02 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
TeraS,
I'm happy to say, with the help of a friend, I believe we've identified the cause. Can you please try the attached.


Attachments:
check_spammers.zip [36.51 KiB]
Downloaded 50 times

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!
Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Fri Apr 24, 2009 5:32 am 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
<runs off to try it out>



Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Fri Apr 24, 2009 5:37 am 
Offline
User avatar

Joined: Thu Apr 16, 2009 2:35 pm
Posts: 31
Yay!

I have a database!

Thank you!!!!!

<huggles>


Tera

_________________
Thank you for calling TeraS, Queen of the Succubi... Please wait and she will be with you shortly...


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Fri Apr 24, 2009 10:25 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
hehe thanks for letting me know :)

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sat May 09, 2009 5:14 pm 
Offline

Joined: Tue May 05, 2009 5:23 pm
Posts: 5
How did you fixed your issue? I'm using 0.29 version and I can't connect to database. I have double checked all the info and everything is entered correctly.


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sat May 09, 2009 5:22 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
Welcome to TIC :)

What error are you receiving?

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sat May 09, 2009 5:49 pm 
Offline

Joined: Tue May 05, 2009 5:23 pm
Posts: 5
MysteryFCM wrote:
Welcome to TIC :)

What error are you receiving?


Thanks

Error: Cannot query database ....


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sat May 09, 2009 6:41 pm 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
Can you double check your DB connection info? (it MUST be the same as the connection info in the forums config (config.php if it's phpBB) file).

If this is definately the same, please open view_spammers.php and go to line #31, then change it to the following so we can see exactly what the error is;

Code:
echo '<tr><td class="results_white" align="center" colspan="100%">Error: '.mysql_error().'</td></tr>';

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun May 10, 2009 2:49 am 
Offline

Joined: Tue May 05, 2009 5:23 pm
Posts: 5
Error: Table 'domain_aspam.tblspammers' doesn't exist

Where can I find data I need to insert into database?


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun May 10, 2009 2:59 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
The code should be creating that for you if the account you've asked it to use, has permissions to do so. If not, you'll need to ensure the following are created;

Table: tblspammers
Fields:

fldspammer_id int NOT NULL AUTO_INCREMENT
PRIMARY KEY(fldspammer_id)
fldspammer_name varchar(255)
fldspammer_ip varchar(15)
fldspammer_mail varchar(255)
flddb_matched varchar(255)
fldadded DATE
fldspammer_count int

If you've got phpMyAdmin available, load that up, and go to the database (default name: sbst). If the database does not exist, and you have facilities to do such, you'll need to create this in phpMyAdmin.

Once you've selected the sbst database, go to the SQL tab, and have it run the following;

Code:
CREATE TABLE IF NOT EXISTS tblspammers(fldspammer_id int NOT NULL AUTO_INCREMENT,PRIMARY KEY(fldspammer_id),fldspammer_name varchar(255),fldspammer_ip varchar(15),fldspammer_mail varchar(255),flddb_matched varchar(255),fldadded DATE,fldspammer_count int)


Aslong as it can execute this correctly, it should run just fine.

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun May 10, 2009 3:13 am 
Offline

Joined: Tue May 05, 2009 5:23 pm
Posts: 5
OK i will insert manually, account has all permissions in that database but it didn't create anything.

I executed that code, and it works fine, you should really insert that into manual.

Thanks


Last edited by Bono_ on Sun May 10, 2009 3:29 am, edited 1 time in total.

Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Sun May 10, 2009 3:20 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
Thanks for letting me know.

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
 Post subject: Re: Sooo many questions...
PostPosted: Mon May 11, 2009 3:55 am 
Offline

Joined: Tue May 05, 2009 5:23 pm
Posts: 5
Btw what do you think about intergration your script with CSF (firewall) so when banned CSF firewall would automatically read ip and ban it.

http://www.configserver.com/cp/csf.html


Top
 Profile Send private message E-mail  
 
 Post subject: Re: Sooo many questions...
PostPosted: Mon May 11, 2009 5:03 am 
Offline
Site Admin
Site Admin
User avatar

Joined: Sun May 15, 2005 12:42 pm
Posts: 3472
Location: Newcastle, UK
Feel free :)

_________________
Regards

Steven Burn
Ur I.T. Mate Group / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!


Top
 Profile Send private message  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 24 posts ] 

All times are UTC - 7 hours


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  

Who is online

Who is online In total there are 0 users online :: 0 registered, 0 hidden and 0 guests (based on users active over the past 5 minutes)
Most users ever online was 115 on Tue Jul 13, 2010 5:32 pm

Users browsing this forum: No registered users and 0 guests

New posts    No new posts    Forum locked
Powered by phpBB