Joomla! Discussion Forums

OK folks,

I got a patch out for my two projects tonight. Upgrade to them ASAP.

BSQ Sitestats
http://forge.joomla.org/sf/projects/bsq_sitestats

JoomlaLib
http://forge.joomla.org/sf/projects/joomlalib

If you notice any other security issues, please send me a PM or contact me via our BSQ Sitestats forum on http://forum.4theweb.nl

Thanks,
Brent

Aloha!
Should we uninstall the component through the back-end?  Will this remove the current stats in the db?

Mahalos!

Super mahalos for the very quick reply!

Brent - installed BSQ just fine.  Everything looks good.  I am getting this in my log and I'm not sure what to make of it...

For the last several days I have had like a million of these entries...

Every minute I have an entry from an "Indeterminable" browser that keeps hitting this url:

http://www.girlscantwhat.com/component/ ... ss;action/

that link leads to the forum page.

There seem to be 4 or more IP addresses that do this.  These are not googlebots - at least I don't think they are - the googlebots actually say googlebot when you look up the IP address.  And searchbots don't repeatedly hit the same page over and over again.  The IP address tells me nothing other than all 4 or so of them US based.

I ask what these hits are because I found evidence of a hacking attempt on my site last night (no damage done) so I am looking everything over very closely now.  Hmmm

Any ideas?  They are still showing even after installing the latest about a half hour ago.  Thanks!

Hey I found another strange thing.

When I checked the stats after the install of 2.1.1, I saw that a friend had been on my site in the last couple of minutes.  So I IM'd her and asked her if she was.  She said she hadn't been on my site all day.  Joomla shows her logged in and she's listed in the stats.  The log shows her looking at two really old blog articles.  Very odd.  May not be related to BSQ but I thought I'd mention it.

Just an update...I blocked these IPs and everything seems to be fine now.  I am noticing on the "hits per day" graph that the lat point on the right shows the previous days date when you hover over it, but that is the point that keeps going up throughout the day as more hits are counted.  It also seems to jump to the next day (meaning rollover to the correct day) late in the evening.  Not sure what that is based on.  The actual time on the hits is the same as my server.

Same problem here, but I am using an earlier 2.0 version. I think this has been an issue for a while.

Please don't jack this thread for bug reports. I'm looking for security issues only.

I'm sorry. 
It looked like this entire thread was about the upgrade because the first post directed security issues to be handled outside this thread.

can you advise in the template.php where the following is insetred

if(file_exists($mosConfig_absolute_path."/components/com_bsq_sitestats/bsqtemplateinc.php"))
{
        require_once($mosConfig_absolute_path."/components/com_bsq_sitestats/bsqtemplateinc.php");
}
?>

Thankyou

I have mine right after the tag. 

thankyou, I think it works lol

would I be right in saying that this is correct?

if(mosCountModules('right')>0) { ?>
                                     
                                     
                                     
                               

Looks good.  You should start getting daily stats immediately.  I just clicked your link so there should be at least one hit to your home page.  Look on the summary tab.  On the referrers tab it should show that hit coming from joomla.org.


  <-- where did this little guy come from?  cute!

Where did he come from 

Well Ive tried all of that but there are no statistics as yet, Ive had 4 members and 3 guests on line in 120 minutes - but nothing to show 

What are the settings for 'hit tracking' in your configuration?

These are set to the following:-

Track hits =-Yes

I am not sure what is going on at this point.  You might PM the developer. 

will the installation effect my database in any way? thanks in advance