Warning For Cj Ultra Users
 

Hi all,

there is a BIG Bug in CJ ULTRA

after u installed the CJ ultra you need to REMOVE or RENAME the
setup.php
if you don t every other fool (with an SQL DB) can setup his DB @ u re site,
and take you site over.

he can also activate the UNINSTALL.php
so you should delete that one too

i checked some CJ site;s
and they all have the setup.php still there
(about 7 out of 10)

Good Luck with this!

Mzzl Da DJ

Wrong use of the word bug and as far as i know uninstall.php asks for a password, unless you are using an old version of the script. Of course it's good to let people know these things :)

I was told you should delete:
setup.php uninstall.php common.txt
after an install.
(no need to upload uninstall.php in the first place)

rename: admin.php
rename: webmaster.php if you want.

Doesnt Lane clearly say to delete that file and uninstall.php after installation? none of my sites have it.... if the person doesnt listen, its there fault

shit i deleted my site :Graucho

hehe

I didn't see it in the readme file when I just installed it, but it was common sense to me to rename a couple of files even though someone would have to know your database name/user and pass to do anything with it. And if they did do that I think it would be pretty obvious when you checked your stats, they would either have to change your password (1st clue) or things would look seriously wrong with your stats (2nd clue)

I checked around myself and a lot of people don't
rename those files.

RD

the problem of UNINSTAL.php is this:

if a person uses the setup.php then he sets his OWN password and Database,

in the ADMIN sets the UNINSTAL on ACTIVE,
he uses the admin (because he got the password)
and U re site is gone!

that s why you COULD/ SHOULD delete that one too



i don t give a DAMN about this all
i am just warning some "stupid" webmasters
i haven t got CJ ULTRA myself

mzzl Da DJ