Home •  Forum •  FAQ •  Search •  Recent Topics •  Memberlist •  Register •  Log in 
Forum » Icy Phoenix Support » Older Versions Archive » Old Patches

058-006 - FIXED - More Security Fixes

This topic is locked: you cannot edit posts or make replies.

 

Mighty Gorgon
Quote
Posts: 7192 Location: Borgo San Michele
Sun 27 Aug, 2006 20:42
Subject: 058-006 - FIXED - More Security Fixes
Hi all.

I'm sorry for having to post again a critical patch about a new security hole I've found in phpBB XS thanks to mameto.

Please, apply this patch to your XS as soon as possible.

This patch fixes a security issue in BB Usage Stats and a couple of small bugs in other files.


058_006_More_Security_Fixes.zip
Description: 058-006 - More Security Fixes 
Download
Filename: 058_006_More_Security_Fixes.zip
Filesize: 56.83 KB
Downloaded: 863 Time(s)

Profile PM   Website
ThE KuKa
Quote
Posts: 489 Location: Sabadell
Sun 27 Aug, 2006 21:08
Subject: Respuesta: 058-006 - FIXED - More Security Fixes
Thanks MG and Mameto 8)

Profile PM   Website MSN Skype
andrea75
Quote
Posts: 379 Location: Perugia
Thu 31 Aug, 2006 21:40
Subject: Re: 058-006 - FIXED - More Security Fixes
Why dymanic meta tags doesn't works after this update? :?

Profile PM   Website YIM MSN Skype ICQ
Mighty Gorgon
Quote
Posts: 7192 Location: Borgo San Michele
Fri 01 Sep, 2006 16:47
Subject: Re: 058-006 - FIXED - More Security Fixes
andrea75 wrote: [View Post]
Why dymanic meta tags doesn't works after this update? :?

They are working here... :shock:

Profile PM   Website
andrea75
Quote
Posts: 379 Location: Perugia
Fri 01 Sep, 2006 17:13
Subject: Re: 058-006 - FIXED - More Security Fixes
Mighty Gorgon wrote: [View Post]
andrea75 wrote: [View Post]
Why dymanic meta tags doesn't works after this update? :?

They are working here... :shock:


No Luca... they are the same in all topics and in all pages...

Code: [Download] [Hide]
  1. <meta name="title" content="058-006 - FIXED - More Security Fixes" />  
  2. <meta name="author" content="phpBB XS Staff :: http://www.phpBBXS.eu/" />  
  3. <meta name="copyright" content="(c) 2002-2006 phpBB XS Staff" />  
  4. <meta name="keywords" content="phpBB XS, phpBBXS, phpbb, premodded, communities, forum, portal, cms, open source, community, mods, templates" />  
  5. <meta name="description" content="phpBB XS" />  
  6. <meta name="category" content="general" />  
  7. <meta name="robots" content="index, follow" /> 


the problem is solved by Antonio Mercurio here

http://www.phpbbplus.it/phpbbplus/viewtopic.php?t=3468

Profile PM   Website YIM MSN Skype ICQ
ganesh
Quote
Posts: 221 Location: Somewhere... over the Rainbow...
Fri 01 Sep, 2006 19:01
Subject: Re: 058-006 - FIXED - More Security Fixes
Thus... thanx to Antonio ;)

Profile PM   Website YIM MSN Skype
Mighty Gorgon
Quote
Posts: 7192 Location: Borgo San Michele
Fri 01 Sep, 2006 19:04
Subject: Re: 058-006 - FIXED - More Security Fixes
No guys... META are working... they are set to be shown only when TOPIC, FORUM or CAT is viewed... not for post...

Check this part of the MOD:

Code: [Download] [Hide]
  1. if ( isset($_GET[POST_TOPIC_URL]) )  
  2. {  
  3. $meta_topic_id = intval($_GET[POST_TOPIC_URL]);  
  4. }  
  5. elseif ( isset($_GET[POST_FORUM_URL]) )  
  6. {  
  7. $meta_forum_id = intval($_GET[POST_FORUM_URL]);  
  8. }  
  9. elseif ( isset($_GET[POST_CAT_URL]) )  
  10. {  
  11. $meta_cat_id = intval($_GET[POST_CAT_URL]);  
  12. } 


And try to view a topic...

Click here for example!

http://www.phpBBXS.eu/viewtopic.php?t=196

I wouldn't implement this even for posts, because it will slow down page loadings... and it's not a good thing... :wink:

Pages will be indexed when the topic link is clicked... and it's enough... :wink:

Profile PM   Website
ganesh
Quote
Posts: 221 Location: Somewhere... over the Rainbow...
Fri 01 Sep, 2006 19:22
Subject: Re: 058-006 - FIXED - More Security Fixes
:0041:

Eheheh...

Profile PM   Website YIM MSN Skype
andrea75
Quote
Posts: 379 Location: Perugia
Fri 01 Sep, 2006 19:54
Subject: Re: 058-006 - FIXED - More Security Fixes
Mighty Gorgon wrote: [View Post]
No guys... META are working... they are set to be shown only when TOPIC, FORUM or CAT is viewed... not for post...

Check this part of the MOD:

Code: [Download] [Hide]
  1. if ( isset($_GET[POST_TOPIC_URL]) )  
  2. {  
  3. $meta_topic_id = intval($_GET[POST_TOPIC_URL]);  
  4. }  
  5. elseif ( isset($_GET[POST_FORUM_URL]) )  
  6. {  
  7. $meta_forum_id = intval($_GET[POST_FORUM_URL]);  
  8. }  
  9. elseif ( isset($_GET[POST_CAT_URL]) )  
  10. {  
  11. $meta_cat_id = intval($_GET[POST_CAT_URL]);  
  12. } 


And try to view a topic...

Click here for example!

http://www.phpBBXS.eu/viewtopic.php?t=196

I wouldn't implement this even for posts, because it will slow down page loadings... and it's not a good thing... :wink:

Pages will be indexed when the topic link is clicked... and it's enough... :wink:


Thanks Luca.. now I have understand. Sorry for my ignoranceabout it! ;) But it wasn't so simple to understand... :roll:

Profile PM   Website YIM MSN Skype ICQ
Mighty Gorgon
Quote
Posts: 7192 Location: Borgo San Michele
Sat 02 Sep, 2006 05:00
Subject: Re: 058-006 - FIXED - More Security Fixes
andrea75 wrote: [View Post]
Thanks Luca.. now I have understand. Sorry for my ignoranceabout it! ;) But it wasn't so simple to understand... :roll:

No problem... we are all here to learn! :wink:

Profile PM   Website
This topic is locked: you cannot edit posts or make replies.
 

Page 1 of 1


  
You cannot post new topics
You cannot reply to topics
You cannot edit your posts
You cannot delete your posts
You cannot vote in polls
You cannot attach files
You can download files
You cannot post calendar events

   

This is a "Lo-Fi" version of our main content. To view the full version with more information, formatting and images, please click here.

Powered by Icy Phoenix based on phpBB
Generation Time: 1.3014s (PHP: 2% SQL: 98%)
SQL queries: 33 - Debug Off - GZIP Enabled