THT Community (TCom) - THT Bug Report

THT Exploit

Sat, 12 Jun 2010 21:37:36 -0400

Removed.

Fixing the Server status - View servers option

Thu, 10 Jun 2010 09:33:53 -0400

Replace this code in:
includes/status.php

PHP Code:

//Web Server Status v 1.4, Copyright 2002 By Ryan Schwiebert, visit http://www.schwebdesigns.com/
//This script may be freely distributed providing all copyright headers are kept intact. 

//Concept from:
//Abax Server Status v1.04, Copyright 2002 By Nathan Dickman, visit http://www.NathanDickman.com/
//Location of the live or dead server images
//@author Julio Montoya  Beeznest - Fixing the url/port management

//Please change to your server specifications
$live = "../themes/icons/lightbulb.png";
$dead = "../themes/icons/lightbulb_off.png";

//The status checking script
//meddle at your own risk!
//check for port number, default is 80
$link = $_GET['link'];
$s_link = basename($link);
list($addr,$port)= explode (':',"$s_link");
if (empty($port)){
    $port = 80;
}

//Test the server connection
$churl = @fsockopen($addr, $port, $errno, $errstr, 5);
if (!$churl){
    //echo $errstr;
    header("Location: $dead");
} else {
   header("Location: $live");             
}
?>

Add subdomain bug...

Tue, 01 Jun 2010 09:47:18 -0400

Hello, I have installed tht on my serve.

Everything works fine except one thing! The addition of sub-areas there have one in the list when a customer takes command ... While I put three, there's only one they are all three set to the same server.

Help, please.

Thank's.

Accounts Suspended Even After An Invoice Is Paid

Sun, 30 May 2010 19:20:21 -0400

When you first start out with a premium account, THT suspends it. When I mark the invoice as paid in the admin control panel, the account is still suspended and it has to be manually unsuspended through WHM. Does the invoice have to be actually paid or can it be marked as paid to unsuspend the account?

1.2.1 -> 1.2.2 (Beta) Upgrade Problems.

Sat, 29 May 2010 12:18:04 -0400

1. When attempting to run upgrade script. THT performs a directory check to make sure it is running from the correct location, and despite being correct... It did not let me past... So i removed the check.

2. Upgrading, so select upgrade, hit go. And. Skips next step since it's already configured, and than it hangs there forever on the next step.....

Sooo... Yea......

Deprecated: Function split() is deprecated

Sat, 15 May 2010 10:06:54 -0400

THT Version: 1.2.1
Your THT installation URL: Please PM me for this
Browser (including version): FireFox 3.6
Your Operating System: Windows 7 pro 64 bit and PCLinuxOS 64 Bit
Server's Operating System: CentOS 5.4 86_64
Apache Version: Server Version: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 mod_perl/2.0.4 Perl/v5.8.8
Server Built: Apr 17 2010 10:23:42 [built by EasyApache]
Control Panel Type: WHM
Control Panel Version: 11.25
Error: Deprecated: Function split() is deprecated in /home/******/public_html/hosting/includes/rss/rss_parse.inc on line 153
Problem: Under the Noted for Admin box upon login for the first time (not after a new install), the above error is displayed three times, just above the THT News & Updates.
Once you go to another page and return, error is gone.

Fri, 10 Sep 2010 06:53:37 -0400

Your panel is great but it has a lot of bugs

example:
[b]does not filter characters [/b]= xss [Session hijacking]

[b]Full Path Disclosure [FPD] = [/b]

[code]script_url/includes/rss/scripts/simple_smarty.php
script_url/includes/output.php
script_url/includes/ajax.php?function=70
script_url/support/?page[]=34[/code]

...and much much more.

You can fix it. Your software would be safer and better.

Can't terminate domains with hyphens.

Wed, 12 May 2010 17:06:58 -0400

I was cleaning out users who signed up and never paid, but whenever I try to terminate domains that have hyphens in them, I get this:

Quote://///////////////THT ERROR
Error: That server doesn't exist!
Server ID: 2
/////////////////
/////////////////THT ERROR
Error: The server .php doesn't exist!
Server ID:
Path: ../includes/servers/.php
/////////////////

Fatal error: Call to a member function terminate() on a non-object in /home/*********/public_html/includes/class_server.php on line 250

Bug?

Can't restrict access

Fri, 23 Apr 2010 13:49:06 -0400

Hey!

I've just found out that I can't restrict access to Paid Configuration and P2H Forums parts of the THT administration area. There is no checkbox for these two parts when creating a staff account, nor when editing it.

This could resoult that someone changes Paid Configuration's PayPal to his own and head administrator wouldn't even notice it.

Terminating an accoutn

Tue, 13 Apr 2010 01:54:54 -0400

Hey,
When you terminate an account from the admin cp, if the cookie is still on the persons comp and its still like you know not updated if thats the word?

THT goes quite mufed up xD

This error displays about 3-4 times:

Code:

/////////////////THT ERROR

Error: Couldn't retrieve client data!

Username:

/////////////////

And the template goes all out of place etc...

Email field is finicky in Safari (and most likely Chrome)

Mon, 12 Apr 2010 21:38:50 -0400

This doesn't apply in Firefox, but in Safari, if you use Tab to change fields instead of just clicking, the Email field doesn't get checked. This is somewhat annoying.

1.2.1 Username Bug

Sun, 28 Mar 2010 15:49:40 -0400

Wewt. i found a bug....

When a user enters their username in registration:
meh_asdf would be accepted....

cPanel does not allow _ and likely other symbols in usernames... Im not sure what else is not allowed by cPanel.

cPanel does make the account however and truncates it without the symbol.

2 signup bugs

Fri, 26 Mar 2010 04:25:20 -0400

I'm having a few problems..

On signup when i click to the TOS agreement, it wont let me go any further SOMETIMES, i click next 100 times and it still wont go.

Sometimes it decides to work, sometimes not.

On signup - step 3 when i enter a username, password and email they all have the red X on them and refuse to accept ANYTHING i put in which means i can't continue.

I'm running the latest PHP, cPanel and THT V1.2.1 I've triple checked the WHM connected and CHMODDED all the server files / tpl files.

Can anyone help me ?

staff account eorror

Mon, 22 Mar 2010 05:14:50 -0400

to i have installed THT

BUT

evertime i go to the admin area it say

/////////////////THT ERROR
Error: Staff member not found
Staff ID: 1
/////////////////
/////////////////THT ERROR
Error: Couldn't retrieve staff data!
Username:
/////////////////

Users are Able to Create Usernames >8 Characters

Sun, 14 Mar 2010 11:45:39 -0400

THT Version: 1.2
Your THT installation URL: http://niftyhost.us/client
Browser (including version): Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 (.NET CLR 3.5.30729) - Build ID: 20100115144158
Your Operating System: Windows Vista with all the latest fixes
Server's Operating System: CENTOS 5.4 x86_64 virtuozzo
Apache Version: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
Control Panel Type: WHM
Control Panel Version: WHM 11.25.0
Error: Makes it impossible to log in to cPanel if you're stupid.
Problem: On my installation of THT, users were able to create usernames with lengths of more than 8 characters. I've made a quick fix to this problem by applying a MAXLENGTH attribute to /include/tpl/orderform.tpl, but it's easy to bypass and it makes their account not work as expected.

[Error] Search by ID!

Wed, 03 Feb 2010 13:49:21 -0500

When I search for an ID of a User, appears this error:

THT ///////////////// ERROR
Error: SQL Query Failed
Function: query
SQL Error: Column 'id' in where clause is ambiguous
/////////////////

Warning: mysql_num_rows (): supplied argument is not a valid MySQL result resource in / home / hostweb / public_html / dashboard / includes / class_db.php on line 54

Warning: mysql_num_rows (): supplied argument is not a valid MySQL result resource in / home / hostweb / public_html / dashboard / includes / class_db.php on line 54
No clients found!

Error when creating Paying Account

Tue, 05 Jan 2010 21:57:19 -0500

Today 1/5/2010 I just downloaded and installed thehostingtool.

Testing, when I create a new account, a Paid account, the following error shows. I tried with the Free account feature, and the error does not show.

Your account has been completed!
You may now use the client login bar to see your client area or proceed to your control panel. An email has been dispatched to the address on file.
Fatal error: Cannot redeclare class whm in /home/allthing/public_html/beshost.net/fh2/includes/servers/whm.php on line 9

Please help.

Decimal place in Price

Tue, 05 Jan 2010 21:48:51 -0500

Today 1/5/2010 I just downloaded and installed thehostingtool.

When creating packages, it is not accepting the decimal for the price. Instead of $6.99 it will create 699

Please help.

Can not parkandomaine

Sat, 19 Dec 2009 12:33:31 -0500

I can't parked an domaine after terminate there account .please helpme for that ,my domaine name host5711.co.tv(for reselkler account) band5711.info the domaine I can't parked

Error with paid packages?

Wed, 16 Dec 2009 23:10:18 -0500

Well, I have a reseller I have a paid package. But when it gets as far to the registeration like the 4th part. It gives this error.

Code:

/home/hostucot/public_html/client/includes/servers/whm.php on line 9

My line 9 on the whm.php is.

Code:

class whm {

What is the problem?

It does not even make the user's pay for the packages, it makes the account but does not make them pay.