An Error Has Occurred! Invalid referring site.

[zhassan]

greetings,

i just installed YaBBse 1.5.0 and when i try to save any settings or even try to remove the error logs or even try to update my profile i get error stating "An Error Has Occurred! Invalid referring site."  What have I not done correct.... my database seems to be fine since it is creating users just fine... also the links to apache 1.3.27 are working... any help would be greatly appreciated..


P.S. I just tried to create a new board and I get the above error message... as a matter of fact, anything I try to Modify it gives me the error message...
thx

Zubair

[[Unknown]]

Browser, server, PHP, MYSQL versions...

Might try upgrading to 1.5.1.

Are sessions set up properly on your server?

-[Unknown]

[zhassan]

Hi and thanx for replying so quickly.... well I am running Yabbse on apache 1.3.27 on solaris 8, apache is running fine as i am also hosting other websites on it... php version 4.3.1 and mysql is 3.22, and my local browser that I am viewing the site from in IE 6.0 SP1 on Win2k.  As for youre comment about sessions... how do I check, and if they arent set properly how do I fix it.. thanx again

Zubair

[[Unknown]]

First, I very much recommend 1.5.1.  It is purely bug fixes over 1.5.0, and is even faster.

To check if sessions are properly set up, you will want to open up the php.ini on your server and check if session.save_path is set to a proper value.

The only thing I can say is that this is the relavant code...

Code Select Expand

   $referer = parse_url($HTTP_REFERER);

   if (strpos($HTTP_HOST, ':'))
      $rhost = substr($HTTP_HOST, 0, strpos($HTTP_HOST, ':'));
   else
      $rhost = $HTTP_HOST;

   if (!empty($referer['host']) && strlen($rhost) && strtolower($referer['host']) != strtolower($rhost))
      fatal_error($txt['yse306']);
In Subs.php.  If you understand the security risks, you may wish to remove it.... but this is not recommended.

-[Unknown]

[zhassan]

Hey thanx for the input, I tried 1.5.1 and it seems to work for me... thanx for the quick input and response... I thought I was going senile for a little while... Thanx again

Zubair....

P.S. youre software KICKSASS...

[David]

I also reccomend you upgrade MySQL to 3.23.56 because previous version have a security hole allowing users root access.