You are missing our premiere tool bar navigation system! Register and use it for FREE!

NukeCops  
•  Home •  Downloads •  Gallery •  Your Account •  Forums • 
Readme First
- Readme First! -

Read and follow the rules, otherwise your posts will be closed
Modules
· Home
· FAQ
· Buy a Theme
· Advertising
· AvantGo
· Bookmarks
· Columbia
· Community
· Donations
· Downloads
· Feedback
· Forums
· PHP-Nuke HOWTO
· Private Messages
· Search
· Statistics
· Stories Archive
· Submit News
· Surveys
· Theme Gallery
· Top
· Topics
· Your Account
Who's Online
There are currently, 373 guest(s) and 0 member(s) that are online.

You are Anonymous user. You can register for free by clicking here
Nuke Cops :: View topic - Alert - Altered nuke.sql file being circulated gives admin [ ]
 Forum FAQ  •  Search  •   •  Memberlist  •  Usergroups   •  Register  •  Profile •    •  Log in to check your private messages  •  Log in

 
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
Author Message
nathanraymond
Premium
Premium


Joined: Jan 17, 2003
Posts: 121


PostPosted: Thu Jul 24, 2003 9:45 am Reply with quoteBack to top

this was covered also here

Quote:
disgruntledtech
Site Mod



Joined: Apr 14, 2003
Posts: 397
Location: Tulsa, OK
Posted: Thu Jul 10, 2003 7:12 am Post subject: Has my version of phpnuke been tampered with? <---answer

--------------------------------------------------------------------------------

if you have downloaded a version of phpnuke and didn't get it from phpnuke.org and think it may have been tampered with heres what to do:

go here and download this software (Windows 95, 98, ME, NT4, Windows 2000 & XP - 15 day trail -no spyware/adware)
http://www.traction-software.co.uk/SFVChecker/

drag the phpnuke file you downloaded into the program

PHP-Nuke-6.5.tar.gz is 3068169 bytes and has a checksum of ec59e1ca
PHP-Nuke-6.7.tar.gz is 4222056 bytes and has a checksum of 04f82c66
PHP-Nuke-6.8.tar.gz is 4437793 bytes and has a checksum of 079cd90b

i don't have my copy of 6.6 so i couldn't give you the sizes / crcs -if you have them post them and i'll add them

if you obtained a copy of php-nuke and it has a different checksum i advise that you do NOT install it (but we might wanna take a look at it )


because I found a bunch of sites that were offering 6.8 but were really 6.5
anyway maybe that helps
nathan
Find all posts by nathanraymondView user's profileSend private message
Stylee
Sergeant
Sergeant


Joined: Jun 22, 2003
Posts: 140

Location: USA

PostPosted: Thu Jul 24, 2003 12:02 pm Reply with quoteBack to top

Is http://www.nukescripts.net A reliable source to download from?
Find all posts by StyleeView user's profileSend private messageSend e-mailVisit poster's website
nathanraymond
Premium
Premium


Joined: Jan 17, 2003
Posts: 121


PostPosted: Thu Jul 24, 2003 12:11 pm Reply with quoteBack to top

I know the site but I do not know who runs it
Find all posts by nathanraymondView user's profileSend private message
Viper
Lieutenant
Lieutenant


Joined: May 04, 2003
Posts: 282

Location: Louisville, KY USA

PostPosted: Thu Jul 24, 2003 12:20 pm Reply with quoteBack to top

Oh yeah, http://www.nukescripts.net is a very reliable source for all PHP-Nuke files, everything is throughly checked and tested to make sure it is clean, then rechecked, Very Happy

Hope this helps.

_________________
Building A Better PHP-Nuke Community!
Image
Find all posts by ViperView user's profileSend private messageVisit poster's website
Stylee
Sergeant
Sergeant


Joined: Jun 22, 2003
Posts: 140

Location: USA

PostPosted: Thu Jul 24, 2003 12:27 pm Reply with quoteBack to top

Thats great news, Thanks
Find all posts by StyleeView user's profileSend private messageSend e-mailVisit poster's website
JG
Sergeant
Sergeant


Joined: Jul 26, 2003
Posts: 124

Location: Cherry Hill, N.J.

PostPosted: Sun Jul 27, 2003 5:00 pm Reply with quoteBack to top

Quote:
go here and download this software (Windows 95, 98, ME, NT4, Windows 2000 & XP - 15 day trail -no spyware/adware)
http://www.traction-software.co.uk/SFVChecker/

drag the phpnuke file you downloaded into the program

PHP-Nuke-6.5.tar.gz is 3068169 bytes and has a checksum of ec59e1ca
PHP-Nuke-6.7.tar.gz is 4222056 bytes and has a checksum of 04f82c66
PHP-Nuke-6.8.tar.gz is 4437793 bytes and has a checksum of 079cd90b


Nifty work Nat! Very Happy

Oh by the way...hi again! Wink

I suppose these comments and questions fall in here, since there seems to be a plethora of nuke sites from one end of the net to the other. All offering some kind of DL.

According to the official site, in the dl section the latest ver is 6.5. In the Club, a link off phpNuke.org, that has a rather stiff 10 bucks a month fee for access resides 6.6.7 and 8 respectavly. (Meaning an upgrade from 6.5 to 6.8 rolls out to 120 bucks)

Is my assumption correct, that if you want the latest version that you join the Club and pay up?

As a "trader" both in matter and spirit, I don't have a problem paying, however if the later versions are Beta or just not ready for public release, a note or two would be great.

If I'm totally off the nut here, please update this neebies mind! Confused

_________________
Galt
Find all posts by JGView user's profileSend private messageSend e-mailVisit poster's websiteYahoo Messenger
JG
Sergeant
Sergeant


Joined: Jul 26, 2003
Posts: 124

Location: Cherry Hill, N.J.

PostPosted: Sun Jul 27, 2003 5:22 pm Reply with quoteBack to top

Linzilla wrote:
Oh yeah, http://www.nukescripts.net is a very reliable source for all PHP-Nuke files, everything is throughly checked and tested to make sure it is clean, then rechecked, Very Happy

Hope this helps.


The site you refer to is NSN Nuke Site, which seems to be an off-shoot of the original (and since they all seem to eat off the term NUKE, with enough similarity until you read the fine print, maybe "others" vs "original" would be more appropriate)

Of course one of the problems is the open source mentality, which leads to a free for all, as any Linux programmer will tell you.

So I guess if there's a question, it's where do you hang your hat (so to speak)?

I've seen a couple of really well done NSN sites, that obliterates any typical look of a FORUM system. Including this site, so I guess the underpinnings of a war has been going on for some time. Rolling Eyes

_________________
Galt
Find all posts by JGView user's profileSend private messageSend e-mailVisit poster's websiteYahoo Messenger
JG
Sergeant
Sergeant


Joined: Jul 26, 2003
Posts: 124

Location: Cherry Hill, N.J.

PostPosted: Sun Jul 27, 2003 5:38 pm Reply with quoteBack to top

SpankedMonkey wrote:
As I said above:

Quote:
I really wish I could remember which site I got it from but I know I didn't need to reg and I cleared my browsers cache on wednesday so I have nothing to track.



I want to say that I did get it from a link off of nukephp.org but I can not be sure, I thought I did. The link said that it required no registration also.

When I get home from work, I will see if there is anything else I can do to see where I got the download.


Maybe I should not do this, however I just got the same 6.8 file, that it declares is by the original author. The details listed are identical as those listed on The Club, but you pay to DL it.

But here is where you got it, and the site is listed on this thread as well as in the link.

http:// link removed!!

Now my question: Is this an official site, and is this an official version, and I refer back to my post regarding the Club!

To the moderator here, if you chose to delete these posts, I'll understand completely!

_________________
Galt

Last edited by JG on Sun Jul 27, 2003 6:04 pm; edited 1 time in total
Find all posts by JGView user's profileSend private messageSend e-mailVisit poster's websiteYahoo Messenger
Zhen-Xjell
Nuke Cops Founder
Nuke Cops Founder


Joined: Nov 14, 2002
Posts: 5939


PostPosted: Sun Jul 27, 2003 5:49 pm Reply with quoteBack to top

I'm going to bed, so I'll make this brief.

*You should always do a complete audit of any program you download from any website prior to production release.*

With that said, phpnuke.org is obviously an official site. Nuke cops is the only other site that is an official phpnuke developer.

_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki]
Find all posts by Zhen-XjellView user's profileSend private messageSend e-mailVisit poster's website
Zhen-Xjell
Nuke Cops Founder
Nuke Cops Founder


Joined: Nov 14, 2002
Posts: 5939


PostPosted: Sun Jul 27, 2003 5:55 pm Reply with quoteBack to top

And another thing about links. If someone wishes to download a product from a site not authorized, then that persons risks tampering on their own website. What we have done in the past is to respect the author. It would be nice to say we also tried to help protect our members from rogue links to club downloads. But that wasn't why we removed links. We removed them because we respect the author. Period.

If you take a risk downloading it outside the club, just remember it was your choice. Hence, why we support the official distribution, and why our bundle has been officially blessed by the author.

We all love this product, and speaking for myself now, I enjoy PHP-Nuke. I want to see it grow to bigger heights. And in order to do that, I desire to work with the author and the team assembled here onsite. We're making excellent progress.

How can I tell?

We're about to break 800,000 page views for this month alone. Last month we broke 760,000 page views.

I'd say that is proof in the pudding that something here is right.

>> getting off my podium , its been a long day <<

_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki]
Find all posts by Zhen-XjellView user's profileSend private messageSend e-mailVisit poster's website
JG
Sergeant
Sergeant


Joined: Jul 26, 2003
Posts: 124

Location: Cherry Hill, N.J.

PostPosted: Sun Jul 27, 2003 6:01 pm Reply with quoteBack to top

Zhen-Xjell wrote:
I'm going to bed, so I'll make this brief.

*You should always do a complete audit of any program you download from any website prior to production release.*

With that said, phpnuke.org is obviously an official site. Nuke cops is the only other site that is an official phpnuke developer.


Just did as you suggested, and 6.8 is identical using the SFV and checksum info. that was obtained at the link I posted., that on the official site, requires payment by joining the Club.

_________________
Galt
Find all posts by JGView user's profileSend private messageSend e-mailVisit poster's websiteYahoo Messenger
Zhen-Xjell
Nuke Cops Founder
Nuke Cops Founder


Joined: Nov 14, 2002
Posts: 5939


PostPosted: Sun Jul 27, 2003 6:09 pm Reply with quoteBack to top

I prefer never to use checksum but rather MD5 as it is a more advanced and harder to crack hash system.

Security falls not only on the developers, but also on the users. Its a two way street.

Aside from the "respect to the author" reason, the other reason for club only downloads is to show support financially. Like most folks, the author is trying to survive with this product. Helping in once in a while does a lot to ensure the longevity of the project.

I can tell you however that even though this whole this is open source and free

_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki]
Find all posts by Zhen-XjellView user's profileSend private messageSend e-mailVisit poster's website
Zhen-Xjell
Nuke Cops Founder
Nuke Cops Founder


Joined: Nov 14, 2002
Posts: 5939


PostPosted: Sun Jul 27, 2003 6:10 pm Reply with quoteBack to top

I prefer never to use checksum but rather MD5 as it is a more advanced and harder to crack hash system.

Always trust yourself first.

_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki]
Find all posts by Zhen-XjellView user's profileSend private messageSend e-mailVisit poster's website
Zhen-Xjell
Nuke Cops Founder
Nuke Cops Founder


Joined: Nov 14, 2002
Posts: 5939


PostPosted: Sun Jul 27, 2003 6:15 pm Reply with quoteBack to top

Hmm... I wonder if PGP signing should be used? An open question to everyone.. should greater security measures be taken for program distribution? Should MD5 hashes be published? Or should PGP signing be used?

Is this a real big concern for folks? We're very capable here at NC to provide those.

_________________
Paul Laudanski, Microsoft MVP Windows-Security
CastleCops: [de] [en] [wiki]
Find all posts by Zhen-XjellView user's profileSend private messageSend e-mailVisit poster's website
JG
Sergeant
Sergeant


Joined: Jul 26, 2003
Posts: 124

Location: Cherry Hill, N.J.

PostPosted: Sun Jul 27, 2003 6:23 pm Reply with quoteBack to top

Zhen-Xjell wrote:
Hmm... I wonder if PGP signing should be used? An open question to everyone.. should greater security measures be taken for program distribution? Should MD5 hashes be published? Or should PGP signing be used?

Is this a real big concern for folks? We're very capable here at NC to provide those.


To answer your question from a users standpoint, and because there are so many other different sites, that seem to offer what the original does, the answer is an emphatic "YES"

The MD5 is already built into PHP, so that makes life a bit easier, if you want to go killer 128 bit encryption.

PGP is certainly less secure from a hacking point of view but typically used.

Maybe this is overkill, but I'd do both. Now for the reservations of doing it.

Nothing prevents a member (disgruntled) from taking it from the original site, and moving it elsewhere, and once you know how something is protected, it's not that difficult to figure a way around, over or under it. I speak from experience since I've really been at this nutty stuff since 1982.

The major problem is, that it's open source, and even though I agree with some security, it's a hard can of worms to clean out. Perhaps it's just a no-win situation?


I just made myself a member of The Club! And ethically, it's not difficult to respect intellectual propriety rights, and support what you gratefully accept, that is beyond your own individual capabilities.

So, now you're stuck with me!! Very Happy

_________________
Galt
Find all posts by JGView user's profileSend private messageSend e-mailVisit poster's websiteYahoo Messenger
Display posts from previous:      
Post new topic  Reply to topicprinter-friendly view
View previous topic Log in to check your private messages View next topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group

Ported by Nuke Cops © 2003 www.nukecops.com
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::
Powered by TOGETHER TEAM srl ITALY http://www.togetherteam.it - DONDELEO E-COMMERCE http://www.DonDeLeo.com - TUTTISU E-COMMERCE http://www.tuttisu.it
Web site engine's code is Copyright © 2002 by PHP-Nuke. All Rights Reserved. PHP-Nuke is Free Software released under the GNU/GPL license.
Page Generation: 0.051 Seconds - 366 pages served in past 5 minutes. Nuke Cops Founded by Paul Laudanski (Zhen-Xjell)
:: FI Theme :: PHP-Nuke theme by coldblooded (www.nukemods.com) ::