Web Hosting
Results 1 to 6 of 6

Thread: JHackGuard

  1. #1
    Join Date
    Aug 2010
    Posts
    2

    Default JHackGuard

    Hi

    Firstly thanks for making this extension available.

    It works absolutely lovely on all of my Siteground websites, however on other websites I get the following error:

    "Illegal key characters in global data"

    Disabling "Filter $_COOKIE" in the plugin parameters (data streams) seems to make the front-end of the website work OK, however the admin back end still won't work.

    Register Globals is definately off in php.ini.

    Please can anyone shed any light on this?

    Many thanks in advance.

  2. #2
    Join Date
    Aug 2010
    Posts
    2

    Default Further Info

    Done a bit of playing with this plugin and discovered that if I disable the "Filter $_COOKIE" option (as mentioned earlier) then the front end works, but the back end admin doesn't.

    However, disabling the "Filer $_POST" and "Filter $_GET" optoins makes the back end admin work OK. How much that negates the purpose of the plugin I don't know.

    Also notice that it doesn't create a log file (one of the first things I noticed but forgot to mention it yesterday) despite being enabled.

  3. #3

    Default

    Hello and thank you for the update.

    I am afraid that there is nothing much we can add without detailed information about the other system where the plugin is not fully functional.

    As for the fact that you disabled some of the security tweaks in order to make it work, well it still has a large number of other security enhancements. Anyway, from your explanation it seemed like the other Joomla installation (not hosted with siteground) is using an alternative login method. Maybe a custom module that is using $_POST and $_GET.

  4. #4
    Join Date
    Sep 2011
    Posts
    2

    Default Filtering

    Before accepting any data into your application, whether it be POST data from a form submission, COOKIE data, URI data, XML-RPC data, or even data from the SERVER array, you are encouraged to practice this three step approach:

    1. Filter the data as if it were tainted.
    2. Validate the data to ensure it conforms to the correct type, length, size, etc. (sometimes this step can replace step one)
    3. Escape the data before submitting it into your database.

    .................................................. ..............................................
    web toolshotspotgama

  5. #5

    Default

    thanks for making this extension available.
    I use this and its greate!

  6. #6
    Join Date
    Mar 2013
    Posts
    3

    Default

    I had the same problem. The data is filtered like egyhosts told, but i had the same error like LeClerc. What should i do?

Similar Threads

  1. error after jHackGuard installation
    By toke in forum Other Software and Applications
    Replies: 4
    Last Post: 02-20-2013, 03:15 PM
  2. JHackGuard problems
    By TheIBFA in forum Joomla Extensions
    Replies: 7
    Last Post: 11-04-2011, 01:12 PM
  3. jHackGuard/sh404sef
    By KenAdam in forum Joomla Extensions
    Replies: 1
    Last Post: 10-04-2010, 10:43 AM
  4. JHackguard
    By cmills in forum Joomla Extensions
    Replies: 1
    Last Post: 08-17-2010, 07:39 AM
  5. JHackGuard
    By kimmc7arts in forum Joomla Extensions
    Replies: 3
    Last Post: 08-09-2010, 08:05 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •