RevCMS Exploit problem

Rastaberry

Rooster 4 president 2k14
Dec 3, 2010
247
29
So there's obviously an exploit in RevCMS the password forgotten case but the problem is I can delete the cases in class core.

But when I delete this code in class.users.php

Code:
final public function forgotten()
    {
        global $template, $_CONFIG, $core;
       
        if(isset($_POST['forgot']))
        {
       
            $template->form->setData();
            unset($template->form->error);
           
            if($this->nameTaken($template->form->for_username))
            {
                if(strlen($template->form->for_password) > 6)
                {
                    if($this->getInfo($this->getID($template->form->for_username), 'seckey') == $core->hashed($template->form->for_key))
                    {
                        $this->updateUser($this->getID($template->form->for_username), 'password', $core->hashed($template->form->for_password));
                        $template->form->error = 'Account recovered! Go <b><a href="index">here</a></b> to login!';
                        return;
                    }
                    else
                    {
                        $template->form->error = 'Secret key is incorrect';
                        return;
                    }
                }
                else
                {
                    $template->form->error = 'Password must have more than 6 characters.';
                    return;
                }
            }
            else
            {
                $template->form->error = 'Username does not exist';
                return;
            }
        }
    }


Then it gives this error:

Fatal error: Class Revolution\users contains 1 abstract method and must therefore be declared abstract or implement the remaining methods (Revolution\iUsers::forgotten) in C:\xampp\htdocs\app\class.users.php on line482

Is there any solvation for this problem?
 

Khalil

IDK
Dec 6, 2011
1,642
786
No, it's not. @Musa_real

You're getting that error because that function is still being declared in the users class's interface (interface.users.php), navigate to '/interfaces' then open 'interface.users.php' find the function there then deleted the line where it's called. Error solved.

Note: Yes, I know this is an old thread and sorry for the bump, but I'm sure this will help noobs who are facing this error at the current moment.
 

Users who are viewing this thread

Top