[Lee]

Hi,

I just tried to upgrade from an earlier version of oj to oj2.06. Now I can never log in at my URL. All I see is the error:

error: Hacker attempt logged.

I have tried deleting the ojaccess.db and the cached file that seems to be related to log in that starts with my login name.

But deleting these made no difference.

Any ideas?

Thanks

[DocJohn]

Sorry, I thought I had tested it thoroughly enough but of course I didn't....

The latest version is fixed. Basically, just replace this line near the top of oj.cgi:

if ($db_uid !~ /^[\w .!?-]/) { &error("Hacker attempt logged."); }

with:

if ((!($db_uid == "")) && ($db_uid !~ /^[\w .!?-]/)) { &error("Hacker attempt logged."); }

Sorry about that.

[Lee]

Thanks! That edit worked perfectly.

Lee