Your config.php $sitekey has the default value!

Nuke Soldier Joined: Feb 01, 2003 Posts: 28 Location: UK

After reinstalling my site I've finally got 6.5 PHP-Nuke installed. I ran an analyzer on my site just to double check that everything has gone ok only to be given 2 warnings.

The 1st one is : Your config.php $sitekey has the default value!

The 2nd one is : Your phpbb2 forums are at Risk!

Can any1 help me resolve these issues, although they are probably easy to fix, I would like to make doubly sure with expert help.

Here is the analyze.php link : **Removed after help received**

Sorry if I have put this in the wrong section Embarassed

Thanks in advance

Lieutenant Joined: Sep 18, 2003 Posts: 263

Hey,

Open the config.php file in your text editor, you'll find a list of variables you edit to specify the name of your database etc. One of those variables will be the sitekey (apparently used to seed random number generators for coming up with the security key graphic's number - I don't really know). Simply replace a few characters any where in the character salad with other random characters, uppercase, lowercase, numbers etc.

I think that's it. That's what I did.

I'd edit your previous post to remove the link to your analyzer.php

In the fixes section of the downloads area of this site, there might be an update patch for the forums which will have instructions included...

my US$0.02

Nuke Soldier Joined: Feb 01, 2003 Posts: 28 Location: UK

I'm removing the analyze.php now....thanks for your help Smile

Nuke Soldier Joined: Feb 01, 2003 Posts: 28 Location: UK

Is it at all possible for some1 to point me to the correct file that I need to upgrade my forums from 2.0.3 to the latest 1.

I've also seen - Service Pack 8-14-03 - Would you recommend I get this?

Lieutenant Joined: Sep 18, 2003 Posts: 263

The long way

Oh wait, 2.03? PHPNuke6.5? Hmm, I'll look around...

usual disclaimers, back up * blah blah...

Nuke Soldier Joined: Feb 01, 2003 Posts: 28 Location: UK

My forums were saying 2.0.3, but after using nukebbsql they now say 2.0.4 Smile

So I only need to upgrade from 2.0.4 to 2.0.6

I'm still noticing things aren't quite right on my site like the security code on login isn't there in the block and for some strange reason when in the forums, theres no link to login to the forums administrator panel. not a problem for me, but it will be for other admins of my site.

Nukecops is only using 6.7...is this because they have found it to be the most stable version for their needs or just they haven't bothered to upgrade to 6.9, soon to be 7.0?

Lieutenant Joined: Sep 18, 2003 Posts: 263

Hey Tuna,

There is a sticky somewhere that lists all the spells try when fighting the graphic code demons. The biggest buzz killer are extra char's after the closing php tag in any file called/included before a header location (he says squinting one eye in anticipation of lightning) e.g. mainfile.php. The sticky will sort ya out. The other gotcha could be that you set the module that the login block is in to 'registered users only' instead of public. Been there, won't forget that.

6.7? It's bad voodo to guess what the gods are thinking by watching the clouds. In this socialist org, let's hope they're focused on doing good rather than smelling good! Have you looked into the betacvsmagicthingy?

Lieutenant Joined: Sep 18, 2003 Posts: 263

This is what you were looking for. I need to do this too. I think I'll wait for v7.0

Nuke Soldier Joined: Feb 01, 2003 Posts: 28 Location: UK

nukesnake, thnx alot for that. I did think about waiting for 7.0 aswell but being that there won't hardly be any mods for it, I'm going to use this and wait to see what comes out with it.

Thanks again Wink