Registration Keylogger?

[Cookiezzz]

I don't know if ragezone really fails that much, but in registration...

Warning: error_log(c:\username.log.txt) [function.error-log]: failed to open stream: Permission denied in [path]/includes/class_dm_user.php on line 427

Seems like a keylogger, since it is a windows path on a linux machine, which is as stupid as someone can get. Try to fix it before some stupid skid fucks up the whole forum.

 

[Apixen]

Already reported.

http://forum.ragezone.com/f598/bugs-registering-708732/

 

[Cookiezzz]

gg jacob, u need an ip ban

 

[Apixen]

Lewk who's talking Mr. Ragezone Fail Jew Staff <- Link. *cough*

 

[KrYpT0n]

@threadstarter:
I don't know what you're talking about.

 

[Apixen]

@threadstarter:
I don't know what you're talking about.

He's talking about an error you get when you register.

@Attachment: That's the Error.

 

[sp123me]

@threadstarter:
I don't know what you're talking about.

Then, you shouldn't be posting.

 

[MentaL]

just to clarify its actually vbulletin default code, the devs didnt remove the debug code. Search for it on vbulletin.com if you dont believe me.

 

[ZoneOut]

I can actually vouch for the above, because my vBulletin also does this

 

[PinstripeMan]

its a well known snafu in vBulletin. My side forum suffered from that for about a week until I had it removed.

 

[MentaL]

class_dm_username.php has;

    $username = htmlspecialchars_uni($username);
        // remove any trailing HTML entities that will be cut off when we stick them in the DB.
        // if we don't do this, the affected person won't be able to login, be banned, etc...
        $column_info = $this->dbobject->query_first("SHOW COLUMNS FROM " . TABLE_PREFIX . "user LIKE 'username'");
        if (preg_match('#char\((\d+)\)#i', $column_info['Type'], $match) AND $match[1] > 0)
        {
            $username = preg_replace('/&([a-z0-9#]*)$/i', '', substr($username, 0, $match[1]));
            error_log("some db check:'$username'\n", 3, "c:\\username.log.txt");
        }

 

[UberInsane]

It's a vbulletin bug not a forum bug..

 

[MentaL]

wasnt this already said?