Locked Out By Possible Security Attack

I added a new reference to a javascript file in my template/base/_header.html which caused the dreaded "Possible security attack!!!!" message to appear on ALL of my dolphin pages. Unfortunately, this also includes my /administration pages. Apparently the _header.html page is shared by the normal user dolphin site and the administrator pages.

So now I am locked out of my administration panel. I have caching turned on, so although I can edit the _header.html file, the new changes do not take affect unless I clear the cache from my administration panel.  But I cannot login as an admin because I get the "Possible security attack" message.

Does anyone know how I could possibly clear the cache without actually logging in as the admin???? Alternatively, does any one know how I can turn off the dreaded security message without logging in as the admin?

I've read thru the "Possible security attack" posts, and I understand I should set the two settings to -1 to disable this feature. However, I haven't found anyone else discuss what to do if this dreaded feature has locked you out from logging in as the admin.

Thanks in advance for your thoughts!

Quote · 20 Mar 2010

I am not sure about your other issues,

for the clear cache manually, you have this choice of getting it cleared by simply getting in the folder "cache_public" and "cache" in these delete all the files except the"htaccess" file.. do not delete the htaccess file. its done :)

Quote · 20 Mar 2010

Hey,

 

My suggestion is to remove your javascript refrences then go into your dolphin administration - advanced settings - other panel and change,

 

Total security impact threshold to send report: -1

Total security impact threshold to send report and block aggressor: -1

 

Then re-do your javascript changes.

 

This should fix your problem

Best Regards,

Lee

Quote · 20 Mar 2010

Also i just thought i would post this =]

 

alt=] located right at the top of the forum =]

 

http://www.boonex.com/unity/forums/#topic/Troubleshooting-Possible-Security-Attacks-.htm

 

Best Regards,

Lee

Quote · 20 Mar 2010

I noticed no one actually answered your question which is how to fix this when you can't get into admin. Here is how.

Edit the database manually using phpMyAdmin.

Edit the table sys_options.

Look for the following on about page 8. Your actual page may be different.

Look for sys_security_impact_threshold_log and change it's Value to -1

Then under that is sys_security_impact_threshold_block and change it's Value to -1

https://www.deanbassett.com
Quote · 20 Mar 2010

Thank you all for your kind responses. In my frustration I failed to look for similar postings about clearing the cache and instead was just looking for the security attack postings. I found all the responses very helpful and I did manage to overcome my locked out issue with all your suggestions. Thank you very much!!!!

Quote · 23 Mar 2010
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.