[drupal-support] Too many security notices in banner module

[Nicolas Tostin]

Did you resolve this ?
You can have a look at function valid_input_data in common.inc, looking through the regexp I was able to understand what was wrong with my input, it was because I put a $data...
Also remember that uid 1 by´pass theses checks.
  ----- Original Message ----- 
  From: Larry 
  To: drupal-support at drupal.org 
  Sent: Friday, September 30, 2005 2:37 AM
  Subject: [drupal-support] Too many security notices in banner module


  o am getting a lot of security notices in the banner module. I will be glad if anyone will give me an idea why this is so. I get this notice for every single user.

  I have incldued some  of the notices below. 
  Regards

  Larry


        Location /banner_file.php?pos=0&path=files&tid=0&max=10 

              Terminated request because of suspicious input data: a:3:{i:0;a:1:{i:0;a:1:{i:0;a:4:{i:0;s:1:"2";i:1;s:1:"5";i:2;s:2:"13";i:3;s:2:"22";}}}i:1;a:1:{i:0;a:4:{i:2;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"945";s:9:"day_views";s:3:"925";s:10:"week_views";s:3:"945";s:13:"day_max_views";s:1:"0";s:14:"week_max_views";s:1:"0";s:9:"max_views";s:1:"0";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:153:" document.write('<a href="?q=banner/2"><img src=\'?q=system/files&file=banners/networking_expo_newlogo_0.jpg\' border=0 width=\'100\' height=\'50\'></a>')";}i:5;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"814";s:9:"day_views";s:3:"814";s:10:"week_views";s:3:"814";s:13:"day_max_views";s:4:"1000";s:14:"week_max_views";s:4:"1000";s:9:"max_views";s:1:"0";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:148:" document.write('<a href="?q=banner/5"><img src=\'?q=system/files&file=banners/Lyncs Logo final 2_0.jpg\' border=0 width=\'127\' height=\'42\'></a>')";}i:13;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"331";s:9:"day_views";s:3:"331";s:10:"week_views";s:3:"331";s:13:"day_max_views";s:3:"500";s:14:"week_max_views";s:3:"500";s:9:"max_views";s:3:"500";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:519:" document.write('<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0 " width="125" height="125"> <param name="movie" value="?q=system/files&file=banners/banner1.swf"> <param name="quality" value="high"> <embed src="?q=system/files&file=banners/banner1.swf" quality="high" pluginspage=" http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="125" height="125"></embed></object>')";}i:22;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"326";s:9:"day_views";s:3:"326";s:10:"week_views";s:3:"326";s:13:"day_max_views";s:3:"500";s:14:"week_max_views";s:4:"1000";s:9:"max_views";s:4:"1000";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:138:" document.write('<a href="?q=banner/22"><img src=\'?q=system/files&file=banners/LOGO22_0.gif\' border=0 width=\'125\' height=\'125\'></a>')";}}}i:2;i:1128065349;}. 
              Severity notice notice 
              Hostname 195.93.21.8 
              Upcoming events     

          a.. If you could only attend one business networking event a year (story)(57 days) 
          b.. If you could only attend one business networking event a year (story)(57 days)
         
        more
                  We recommend     


       


  -- 
  London Networking EXPO™ -  "The Ultimate Business Networking Experience™ in Europe! 
  Tel 08701994474
   


------------------------------------------------------------------------------


  -- 
  [ Drupal support list | http://lists.drupal.org/ ]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://drupal3.drupal.org/pipermail/support/attachments/20050930/28b244fe/attachment.htm