Users getting banned when submitting

Lieutenant Joined: Jan 20, 2004 Posts: 213

I have users getting banned when they submit news. Also, I have a user getting banned when he tries to add content (he is an admin).

The script thinks they are inserting an SQL...but they are not...I thought it might be a hidden character in the text, but it is not.

Any suggestions?

Here is two examples of the email I get:

Code:

Date: 23 July 2004, 17:34
- IP Address: 152.163.253.6
- Host: cache-rm06.proxy.aol.com
- User-agent: Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows 98; Win 9x 4.90)
- Referrer: http://www.afterhim.com/admin.php?op=content_edit&pid=81
- Request: /admin.php
- Variable: $text = Looking back...text...text

Code:

- Date: 15 July 2004, 14:52
- IP Address: 69.47.87.27
- Host: d47-69-27-87.try.wideopenwest.com
- User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040206 Firefox/0.8
- Referrer: http://www.afterhim.com/submit.html
- Request: /submit.html
- Variable: $story = God has been known as the Great Physician...text...text

Posted: Fri Jul 23, 2004 7:14 pm

I may be wrong but looks likte the 1st one was a attempt to edit a admin from within your admin panel or they used html codes in the sig.
2nd do you have Admin Secure to block/ban html codes if so thats waht happened.
I have this set on my site and no1 can add [img] [/img] to anything along with many other html tags. I'm new to this stuff so if I am wrong sorry. Holla!!!

Lieutenant Joined: Jan 20, 2004 Posts: 213

The content section, and news section do not pull the signature. They were trying to add news and add content when the ban happened.

Support Mod Joined: Feb 15, 2004 Posts: 806

You can disable "Filtering HTML Tags" option in Admin Secure configuration. For more secure, set "Filter Proofing" to "All Administrators" so all your admins won't be blocked due of editing submitted news articles.

There is an alternative for "Submit News" module replacement, where people can writes and submit article using bbcode instead of html tags. Once I found is in pitcher.no website (nice submit news module, though).

Lieutenant Joined: Jan 20, 2004 Posts: 213

Thanks madman,

I did that, hopefully it will work.

Brandon