058-014 - KB Injection And Minor Fixes


Subject: 058-014 - KB Injection And Minor Fixes
Hi all,
Knowledge Base hits again...

http://secunia.com/advisories/22177/

http://www.securityfocus.com/bid/20277/references

The BBCode issue was already solved in 058a.


You will find a cumulative patch with all old patched files here:

http://www.icyphoenix.com/dload.php?action=file&file_id=6

Included there is also another version of the portal page, which should be faster than the older.


058_014_KB_Portal_Fixes.zip
Description: 058-014 - KB, BBCodes and Portal Fixes 
Download
Filename: 058_014_KB_Portal_Fixes.zip
Filesize: 41.94 KB
Downloaded: 504 Time(s)

Subject: Re: 058 - 014 - KB Injection And Minor Fixes
Just a question.... now the portal is faster than older, but the calendar block now is not visible. It's an your choice or there is other way to insert it on portal? :0032:

Subject: Re: 058 - 014 - KB Injection And Minor Fixes
andrea75, can you try this?

OPEN blocks_imp_calendar.php

INSERT THIS CODE INSTEAD OF THE DEFAULT ONE
Code: [Download] [Hide] [Select]
if(!function_exists(imp_calendar_block_func))
{
function imp_calendar_block_func()
{
global $phpbb_root_path, $phpEx, $template, $images, $lang, $board_config, $userdata, $_GET, $_POST, $db;
global $birthday_week_list, $birthday_today_list;
include($phpbb_root_path . 'mods/netclectic/mini_cal/mini_cal.' . $phpEx);
}
}

imp_calendar_block_func();

Subject: Re: 058 - 014 - KB Injection And Minor Fixes
Don't you have just the 014 patch? Because I've some modified files, and it would take so long to compare all the files included in the comulative patch with mines...it would be better to have just the patch number 14... if it is possible... thanx

Subject: Re: 058 - 014 - KB Injection And Minor Fixes
You can use winmerge http://sourceforge.net/projects/winmerge/ ...

It's really a good thing to compare files. :wink:

Profile PM  
Subject: Re: 058-014 - KB Injection And Minor Fixes
Added an attachment with only new files.

Subject: Re: 058-014 - KB Injection And Minor Fixes
Mighty Gorgon wrote: [View Post]
andrea75, can you try this?

OPEN blocks_imp_calendar.php

INSERT THIS CODE INSTEAD OF THE DEFAULT ONE
Code: [Download] [Hide] [Select]
if(!function_exists(imp_calendar_block_func))
{
function imp_calendar_block_func()
{
global $phpbb_root_path, $phpEx, $template, $images, $lang, $board_config, $userdata, $_GET, $_POST, $db;
global $birthday_week_list, $birthday_today_list;
include($phpbb_root_path . 'mods/netclectic/mini_cal/mini_cal.' . $phpEx);
}
}

imp_calendar_block_func();


The calendar is come back, but has wrong events (now shows all events, past and future) and don't shown the birthdays information

cal

But it's not true that no users has a birthday ;)

Subject: Re: 058-014 - KB Injection And Minor Fixes
Hi

Have the same problem with calendar 8)

Subject: Re: 058 - 014 - KB Injection And Minor Fixes
TheSteffen wrote: [View Post]
You can use winmerge http://sourceforge.net/projects/winmerge/ ...

It's really a good thing to compare files. :wink:

I know, infact i was gonna use it to compare files, but if they're too many to compare, it takes long time :wink:
Mighty Gorgon wrote: [View Post]
Added an attachment with only new files.

Thank you.

Subject: Re: 058-014 - KB Injection And Minor Fixes
pepi wrote: [View Post]
Hi

Have the same problem with calendar 8)


I think that the problem is in the new index.php: some parts relating to calendar and birthday are missing.

Check out with winmerge, comparing it with the original index.php.

By the way, after this huge update I have a problem with the album. When i click the medium thumb in order to show off an image in its original size, the image is not entirely loaded, but I can see only a little strip at the top. Any way to fix it??

Profile PM  
Subject: Re: 058-014 - KB Injection And Minor Fixes
The Album problem is not related to this patch.

Try having a look here:
http://www.mightygorgon.com/viewtop...ht=memory+limit

But the same problem has been discussed even on this site.

Regarding the calendar block, can you try this block and please let me know if the block is working fine? :roll:


blocks_imp_calendar.zip
Description: Calendar Block 
Download
Filename: blocks_imp_calendar.zip
Filesize: 1.81 KB
Downloaded: 143 Time(s)

Subject: Re: 058-014 - KB Injection And Minor Fixes
Hi Mighty
does not show the calender box .........
but i have no upload the index.php and bbcode.php from the KB, BBCodes and Portal Fixes
then i habe installed any mods

pepi

Subject: Re: 058-014 - KB Injection And Minor Fixes
Thnx for the Update

Subject: Re: 058-014 - KB Injection And Minor Fixes
And the old patch? (de 14 released before)

We have to aplied only this patch? (i've got a test forum where i didn't put any patch)

Subject: Re: 058-014 - KB Injection And Minor Fixes
Mighty Gorgon wrote: [View Post]

You will find a cumulative patch with all old patched files here:

http://www.icyphoenix.com/dload.php?action=file&file_id=6


All patches, from #001 to #014

Profile PM  

Page 1 of 3


  
You cannot post new topics
You cannot reply to topics
You cannot edit your posts
You cannot delete your posts
You cannot vote in polls
You cannot attach files
You can download files
You cannot post calendar events

   

This is a "Lo-Fi" version of our main content. To view the full version with more information, formatting and images, please click here.

Powered by Icy Phoenix based on phpBB
Design by DiDiDaDo

Generation Time: 0.195s (PHP: 29% SQL: 71%)
SQL queries: 18 - Debug On - GZIP Enabled