Page 1 of 1

account_page.php overwritten

Posted: 01 Mar 2006, 01:04
by redjen
I'm running Mantis 1.0.0 on Linux (RHEL 4) with Apache 2.0.52 and PHP 4.3.9. I'm the only person using the system at the moment, as we're evaluating it for use. I installed the import add-on (http://www.mantisbt.org/mantis/view.php?id=4220) yesterday, around 7 p.m. (time is important, see below), following the instructions in the readme.

Today, I found that account_page.php had been completely overwritten with this:

Code: Select all

1141084894
64768 1818900 mantis/core/adodb/contrib
64768 1818993 mantis/core/adodb/pear/Auth
64768 1819022 mantis/core/adodb/session/old
64768 1819008 mantis/core/adodb/session
64768 1818992 mantis/core/adodb/pear
64768 1818997 mantis/core/adodb/perf
64768 1818902 mantis/core/adodb/cute_icons_for_site
64768 1818918 mantis/core/adodb/docs
64768 1819030 mantis/core/adodb/xsl
64768 1818928 mantis/core/adodb/drivers
64768 1819074 mantis/core/phpmailer/language
64768 1818994 mantis/core/adodb/pear/Auth/Container
64768 1818905 mantis/core/adodb/datadict
64768 1818883 mantis/core/adodb
64768 1818970 mantis/core/adodb/lang
64768 1819070 mantis/core/phpmailer
This occurred at 7:01 p.m., one minute after I finished modifying files for the import tool and copied over import_issues.php and import_issues_page.php

Code: Select all

ls -l account_page.php: -rwxr-xr-x  1 apache apache 659 Feb 27 19:01 account_page.php
Using grep, I found a similar problem with account_delete.php. Instead of being overwritten, though, those lines were just inserted at the head.

I've replaced the damaged files, but am not sure what happened. I can't find anything significant around that time in log files. Has anyone seen this before, or have any ideas on what caused it?

Posted: 17 Mar 2006, 09:52
by vboctor
I would assume that Mantis wouldn't have access to overwrite these files. I personally never saw this before or have seen anyone report it.

Regards,
Victor
Mantis to Go?
http://www.futureware.biz/mantisconnect/