Support/Comments for PHPIDS 0.6.1.1b-update

1 Posts

Zombie Reply #1, 17 years ago

This is an auto-generated topic for <a href="http://modxcms.com/extras/package/573">PHPIDS 0.6.1.1b-update</a> by Stefanie.

Brief Description:
The PHPIDS 6.1.1 integration for MODx is released. PHPIDS is a PHP based intrusion detection, to find out at a very early step about atacks to your website.

This plugin is based on an article published by Heise Verlag:
Getting started with the PHPIDS intrusion detection system
http://www.h-online.com/security/Getting-started-with-the-PHPIDS-intrusion-detection-system--/features/113163

UPDATE:
Some people had problems with using true instead of true

24,544 Posts

BobRay Reply #2, 17 years ago

Quote from: ReleaseMe at Sep 14, 2009, 11:22 AM

UPDATE:
Some people had problems with using true instead of true

I’m guessing this is not what you meant to type. wink

Did I help you? Buy me a beer
Get my Book: MODX:The Official Guide
MODX info for everyone: http://bobsguides.com/modx.html
My MODX Extras
Bob's Guides is now hosted at A2 MODX Hosting

222 Posts

Stefanie Reply #3, 17 years ago

Currently there is a version mismatch, because I’ve done a copy and past failure with my first version, that should have been named 0.6.1.1 instead of 6.1.1.

The "true" problem was, that it some environments interpreted true not correctly, they took the parameter as string.
Example:

$useMODXLog = isset($useMODXLog)? $useMODXLog: true;

The result was not true, it was ’true’
I’ve changed it to

$useMODXLog = isset($useMODXLog)? $useMODXLog=='true': true;

This is working now.

Currently there is a discussion inside Support/Comments for PHPIDS 6.1.1-released about a new and extended version, that is currently available as beta 3.

Gone away and found a better place to stay

24,544 Posts

BobRay Reply #4, 17 years ago

Quote from: Stefanie at Sep 15, 2009, 12:06 AM

Currently there is a version mismatch, because I’ve done a copy and past failure with my first version, that should have been named 0.6.1.1 instead of 6.1.1.

The "true" problem was, that it some environments interpreted true not correctly, they took the parameter as string.
Example:
$useMODXLog = isset($useMODXLog)? $useMODXLog: true;
The result was not true, it was ’true’
I’ve changed it to
$useMODXLog = isset($useMODXLog)? $useMODXLog=='true': true;
This is working now.

Currently there is a discussion inside Support/Comments for PHPIDS 6.1.1-released about a new and extended version, that is currently available as beta 3.

Hi Stephanie,

It looks like a really valuable addition. I tried to take a look at it but the download link doesn’t work.

I may be way off base, but your fix for the true / ’true’ problem looks wrong to me. If the user sets the parameter to `1` `True` or `TRUE` it will fail. All MODx parameters arrive as strings so maybe a better solution is to send the parameter as `1` or `0`. Then your original code will work.

Or, if you want to cover all the bases, you could do something like this:

$useMODXLog = (isset($useMODXLog) && (strtolower($useMODXLog) != 'true') && ($useMODXLog != '1' )) ? false : true;

Did I help you? Buy me a beer
Get my Book: MODX:The Official Guide
MODX info for everyone: http://bobsguides.com/modx.html
My MODX Extras
Bob's Guides is now hosted at A2 MODX Hosting

222 Posts

Stefanie Reply #5, 17 years ago

Hi BobRay,

For me the link to the current beta on modx.phpids.0.6.1.1c.BETA3.zip does work.
The current Version can only be found if you go to previous version, because I’ve done a copy and past failure while adding the plugin first. The first Version should have been 0.6.1.1, not 6.1.1.

I don’t think, that someone will change the parameters, because there are a bunch of more there:

&useMODxBasePath=Use MODx base path?;list;true,false;true &basePath=PHPIDS path?;string;assets/lib/phpids/lib &useLogFile=Use log file?;list;true,false;false &useEmail=Use email?;list;true,false;true &useDatabase=Use database?;list;true,false;true &useMODxTablePrefix=Use MODx table prefix?;list;true,false;true &useMODXLog=Use MODx Log?;list;true,false;true &logFromImpact=Start logging from impact?;int;5 &sendMailFromImpact=Start sending mails from impact, high (around 15) or very high (around 25-50) impact?;int;15 &idsRecipients=Mail resipients (separated by comma);text; &idsSubject=Mail subject <br />(keep empty to use default);text; &SMTPServer=SMPT server;text; &SMTPPort=SMPT port <br />(default is 25, leave empty to use default);text; &SMTPAccount=SMPT account;text; &SMTPPassword=SMPT password;text;

But yes, I can add the idea to check for every possible true value grin

Gone away and found a better place to stay

2,877 Posts

mrhaw Reply #6, 17 years ago

Link to the old version forum thread -> http://modxcms.com/forums/index.php?topic=39400.0

@hawproductions | http://mrhaw.com/

Infograph: MODX Advanced Install in 7 steps:
http://forums.modx.com/thread/96954/infograph-modx-advanced-install-in-7-steps

Recap: Portland, OR (PDX) MODX CMS Meetup, Oct 6, 2015. US Bancorp Tower
http://mrhaw.com/modx_portland_oregon_pdx_modx_cms_meetup_oct_2015_us_bancorp_tower

☆ A M B ☆
3,112 Posts

goldsky Reply #7, 17 years ago

http://modxcms.com/forums/index.php/topic,39400.msg239464.html#msg239464
Quote from: Stefanie at Sep 07, 2009, 02:33 AM

Currently I’m using some reports done with iReport do get statistics about intrusions. That is much more flexible as to load the data into a grid and just show them.

So... sorry for my newbie question, how do you make the report, again?

Rico
Genius is one percent inspiration and ninety-nine percent perspiration. Thomas A. Edison
MODx is great, but knowing how to use it well makes it perfect!

www.virtudraft.com

Security, security, security! | Indonesian MODx Forum | MODx Revo's cheatsheets | MODx Evo's cheatsheets

Author of Easy 2 Gallery 1.4.x, PHPTidy, spieFeed, FileDownload R, Upload To Users CMP, Inherit Template TV, LexRating, ExerPlan, Lingua, virtuNewsletter, Grid Class Key, SmartTag, prevNext

Maintainter/contributor of Babel

Because it's hard to follow all topics on the forum, PING ME ON TWITTER @_goldsky if you need my help.

222 Posts

Stefanie Reply #8, 17 years ago

Currently I’m doing my reports with iReport as I mentioned in Support/Comments for PHPIDS 6.1.1-released. iReport is an open source reporting tool.
In that thread (Support/Comments for PHPIDS 6.1.1-released) you will find a huge discussion and links to the current beta release, which is much easier to install, because there is no need to use the PHPIDS configuration file, everything can be done with the configuration of the plugin. But you do need to download and install PHPIDS in a directory of your choice.

Gone away and found a better place to stay

☆ A M B ☆
3,112 Posts

goldsky Reply #9, 17 years ago

Yes, I’ve done it.
My question was how to make the report, to pull out the data.

Rico
Genius is one percent inspiration and ninety-nine percent perspiration. Thomas A. Edison
MODx is great, but knowing how to use it well makes it perfect!

www.virtudraft.com

Security, security, security! | Indonesian MODx Forum | MODx Revo's cheatsheets | MODx Evo's cheatsheets

Author of Easy 2 Gallery 1.4.x, PHPTidy, spieFeed, FileDownload R, Upload To Users CMP, Inherit Template TV, LexRating, ExerPlan, Lingua, virtuNewsletter, Grid Class Key, SmartTag, prevNext

Maintainter/contributor of Babel

Because it's hard to follow all topics on the forum, PING ME ON TWITTER @_goldsky if you need my help.

222 Posts

Stefanie Reply #10, 17 years ago

Make a backup of the intrusion data table
Load it to your local computer
Import the data to a local installed MySQL Server
Start iReport
Make a new database connection
Create a new report with the wizard

iReport is a bit like SAP - SAP Business Objects l Crystal Reports l Crystal Reports ....

There is a lot of documentation for iReport available.

If you’ve got a problem working with a reporting tool, I can offer commercial help, feel free to contact me directly.

Gone away and found a better place to stay