Code veranderingen phpBB 2.0.18 --> 2.0.19

Voor discussies rondom phpBB2. phpBB2 wordt niet meer ondersteund en deze berichten kunnen wellicht gedateerd zijn.
Forumregels

Sinds 1 januari 2009 wordt phpBB2 niet meer ondersteund.
Onderstaande informatie is verouderd en dient uitsluitend als archief.
phpBB2.0.x
Gebruikersavatar
lunagang
Berichten: 120
Lid geworden op: 28 mei 2004, 15:52

Code veranderingen phpBB 2.0.18 --> 2.0.19

Bericht door lunagang » 30 dec 2005, 15:02

phpBB 2.0.18 to phpBB 2.0.19 Code Changes

These are the Changes from phpBB 2.0.18 to phpBB 2.0.19 summed up into a little Mod. This might be very helpful if you want to update your Board and have installed a bunch of Mods. Then it's normally easier to apply the Code Changes than to install all Mods again.

When you find a 'AFTER, ADD'-Statement, the Code have to be added after the last line quoted in the 'FIND'-Statement.
When you find a 'BEFORE, ADD'-Statement, the Code have to be added before the first line quoted in the 'FIND'-Statement.
When you find a 'REPLACE WITH'-Statement, the Code quoted in the 'FIND'-Statement have to be replaced completely with the quoted Code in the 'REPLACE WITH'-Statement.

After you have finished this tutorial, you have to upload the install/update_to_latest.php file, execute it and then delete it from your webspace.

  • admin/admin_board.php[/color][/size]
  1. FIND - Line 19

    Code: Selecteer alles

    
    	$module['General']['Configuration'] = "$file";
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$module['General']['Configuration'] = $file;
    
  2. FIND - Line 194

    Code: Selecteer alles

    
    	"L_MAX_POLL_OPTIONS" => $lang['Max_poll_options'],
    	"L_FLOOD_INTERVAL" => $lang['Flood_Interval'],
    	"L_FLOOD_INTERVAL_EXPLAIN" => $lang['Flood_Interval_explain'], 
    
    AFTER, ADD

    Code: Selecteer alles

    
    
    	'L_MAX_LOGIN_ATTEMPTS'			=> $lang['Max_login_attempts'],
    	'L_MAX_LOGIN_ATTEMPTS_EXPLAIN'	=> $lang['Max_login_attempts_explain'],
    	'L_LOGIN_RESET_TIME'			=> $lang['Login_reset_time'],
    	'L_LOGIN_RESET_TIME_EXPLAIN'	=> $lang['Login_reset_time_explain'],
    	'MAX_LOGIN_ATTEMPTS'			=> $new['max_login_attempts'],
    	'LOGIN_RESET_TIME'				=> $new['login_reset_time'],
    
    
  • admin/admin_db_utilities.php[/color][/size]
  1. FIND - Line 696

    Code: Selecteer alles

    
    			$tables = array('auth_access', 'banlist', 'categories', 'config', 'disallow', 'forums', 'forum_prune', 'groups', 'posts', 'posts_text', 'privmsgs', 'privmsgs_text', 'ranks', 'search_results', 'search_wordlist', 'search_wordmatch', 'sessions', 'smilies', 'themes', 'themes_name', 'topics', 'topics_watch', 'user_group', 'users', 'vote_desc', 'vote_results', 'vote_voters', 'words', 'confirm');
    
    REPLACE WITH

    Code: Selecteer alles

    
    			$tables = array('auth_access', 'banlist', 'categories', 'config', 'disallow', 'forums', 'forum_prune', 'groups', 'posts', 'posts_text', 'privmsgs', 'privmsgs_text', 'ranks', 'search_results', 'search_wordlist', 'search_wordmatch', 'sessions', 'smilies', 'themes', 'themes_name', 'topics', 'topics_watch', 'user_group', 'users', 'vote_desc', 'vote_results', 'vote_voters', 'words', 'confirm', 'sessions_keys');
    
  • admin/admin_disallow.php[/color][/size]
  1. FIND - Line 28

    Code: Selecteer alles

    
    	$module['Users']['Disallow'] = append_sid($filename);
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$module['Users']['Disallow'] = $filename;
    
  • admin/admin_ranks.php[/color][/size]
  1. FIND - Line 27

    Code: Selecteer alles

    
    	$module['Users']['Ranks'] = "$file";
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$module['Users']['Ranks'] = $file;
    
  • admin/admin_styles.php[/color][/size]
  1. FIND - Line 30

    Code: Selecteer alles

    
    	$module['Styles']['Manage'] = "$file";
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$module['Styles']['Manage'] = $file;
    
  • admin/admin_users.php[/color][/size]
  1. FIND - Line 180

    Code: Selecteer alles

    
    				message_die(GENERAL_ERROR, 'Could not delete user from banlist table', '', __LINE__, __FILE__, $sql);
    			}
    
    
    AFTER, ADD

    Code: Selecteer alles

    
    			$sql = "DELETE FROM " . SESSIONS_TABLE . "
    				WHERE session_user_id = $user_id";
    			if ( !$db->sql_query($sql) )
    			{
    				message_die(GENERAL_ERROR, 'Could not delete sessions for this user', '', __LINE__, __FILE__, $sql);
    			}
    			
    			$sql = "DELETE FROM " . SESSIONS_KEYS_TABLE . "
    				WHERE user_id = $user_id";
    			if ( !$db->sql_query($sql) )
    			{
    				message_die(GENERAL_ERROR, 'Could not delete auto-login keys for this user', '', __LINE__, __FILE__, $sql);
    			}
    
    
  2. FIND - Line 234

    Code: Selecteer alles

    
    		$username = ( !empty($HTTP_POST_VARS['username']) ) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['username']))) : '';
    
    REPLACE WITH

    Code: Selecteer alles

    
    		$username = ( !empty($HTTP_POST_VARS['username']) ) ? phpbb_clean_username($HTTP_POST_VARS['username']) : '';
    
  3. FIND - Line 407

    Code: Selecteer alles

    
    				if( @file_exists(@phpbb_realpath("./" . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar'])) )
    				{
    					@unlink("./" . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar']);
    
    REPLACE WITH

    Code: Selecteer alles

    
    				if( @file_exists(@phpbb_realpath('./../' . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar'])) )
    				{
    					@unlink('./../' . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar']);
    
  • admin/admin_words.php[/color][/size]
  1. FIND - Line 28

    Code: Selecteer alles

    
    	$module['General']['Word_Censor'] = "$file";
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$module['General']['Word_Censor'] = $file;
    
  • admin/index.php[/color][/size]
  1. FIND - Line 63

    Code: Selecteer alles

    
    			include($file);
    
    REPLACE WITH

    Code: Selecteer alles

    
    			include('./' . $file);
    
  2. FIND - Line 237

    Code: Selecteer alles

    
    			if( preg_match("/^(3\.23|4\.)/", $version) )
    			{
    				$db_name = ( preg_match("/^(3\.23\.[6-9])|(3\.23\.[1-9][1-9])|(4\.)/", $version) ) ? "`$dbname`" : $dbname;
    
    REPLACE WITH

    Code: Selecteer alles

    
    			if( preg_match("/^(3\.23|4\.|5\.)/", $version) )
    			{
    				$db_name = ( preg_match("/^(3\.23\.[6-9])|(3\.23\.[1-9][1-9])|(4\.)|(5\.)/", $version) ) ? "`$dbname`" : $dbname;
    
  • includes/bbcode.php[/color][/size]
  1. FIND - Line 203

    Code: Selecteer alles

    
    	$patterns[] = "#\[url\]([\w]+?://[\w\#$%&~/.\-;:=,?@\[\]+]*?)\[/url\]#is";
    	$replacements[] = $bbcode_tpl['url1'];
    
    	// [url]www.phpbb.com[/url] code.. (no xxxx:// prefix).
    	$patterns[] = "#\[url\]((www|ftp)\.[\w\#$%&~/.\-;:=,?@\[\]+]*?)\[/url\]#is";
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$patterns[] = "#\[url\]([\w]+?://([\w\#$%&~/.\-;:=,?@\]+]|\[(?!url=))*?)\[/url\]#is";
    	$replacements[] = $bbcode_tpl['url1'];
    
    	// [url]www.phpbb.com[/url] code.. (no xxxx:// prefix).
    	$patterns[] = "#\[url\]((www|ftp)\.([\w\#$%&~/.\-;:=,?@\]+]|\[(?!url=))*?)\[/url\]#is";
    
  2. FIND - Line 255

    Code: Selecteer alles

    
    	$text = bbencode_first_pass_pda($text, $uid, '/\[quote=(\\\".*?\\\")\]/is', '[/quote]', '', false, '', "[quote:$uid=\\1]");
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$text = bbencode_first_pass_pda($text, $uid, '/\[quote=\\\\"(.*?)\\\\"\]/is', '[/quote]', '', false, '', "[quote:$uid=\\\"\\1\\\"]");
    
  3. FIND - Line 392

    Code: Selecteer alles

    
    				if( preg_match('#\[quote=\\\"#si', $possible_start, $match) && !preg_match('#\[quote=\\\"(.*?)\\\"\]#si', $possible_start) )
    				{
    					// OK we are in a quote tag that probably contains a ] bracket.
    					// Grab a bit more of the string to hopefully get all of it..
    					if ($close_pos = strpos($text, '"]', $curr_pos + 9))
    					{
    						if (strpos(substr($text, $curr_pos + 9, $close_pos - ($curr_pos + 9)), '[quote') === false)
    						{
    							$possible_start = substr($text, $curr_pos, $close_pos - $curr_pos + 2);
    
    REPLACE WITH

    Code: Selecteer alles

    
    				if( preg_match('#\[quote=\\\"#si', $possible_start, $match) && !preg_match('#\[quote=\\\"(.*?)\\\"\]#si', $possible_start) )
    				{
    					// OK we are in a quote tag that probably contains a ] bracket.
    					// Grab a bit more of the string to hopefully get all of it..
    					if ($close_pos = strpos($text, '"]', $curr_pos + 14))
    					{
    						if (strpos(substr($text, $curr_pos + 14, $close_pos - ($curr_pos + 14)), '[quote') === false)
    						{
    							$possible_start = substr($text, $curr_pos, $close_pos - $curr_pos + 7);
    
  • common.php[/color][/size]
  1. FIND - Line 223

    Code: Selecteer alles

    
    	message_die(GENERAL_MESSAGE, 'Please ensure both the install/ and contrib/ directories are deleted');
    
    REPLACE WITH

    Code: Selecteer alles

    
    	message_die(GENERAL_MESSAGE, 'Please_remove_install_contrib');
    
  • includes/functions.php[/color][/size]
  1. FIND - Line 161

    Code: Selecteer alles

    
    	$sql .= ( ( is_integer($user) ) ? "user_id = $user" : "username = '" .  $user . "'" ) . " AND user_id <> " . ANONYMOUS;
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$sql .= ( ( is_integer($user) ) ? "user_id = $user" : "username = '" .  str_replace("\'", "''", $user) . "'" ) . " AND user_id <> " . ANONYMOUS;
    
  • includes/functions_post.php[/color][/size]
  1. FIND - Line 28

    Code: Selecteer alles

    
    $html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#');
    $html_entities_replace = array('&', '<', '>');
    
    REPLACE WITH

    Code: Selecteer alles

    
    $html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#', '#"#');
    $html_entities_replace = array('&', '<', '>', '"');
    
  • includes/usercp_confirm.php[/color][/size]
  1. FIND - Line 156

    Code: Selecteer alles

    
    	if (!empty($HTTP_GET_VARS['c']))
    	{
    		$_png = define_raw_pngs();
    
    		$char = substr($code, intval($HTTP_GET_VARS['c']) - 1, 1);
    		header('Content-Type: image/png');
    		header('Cache-control: no-cache, no-store');
    		echo base64_decode($_png[$char]);
    
    		unset($_png);
    		exit;
    	}
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$_png = define_raw_pngs();
    
    	$char = substr($code, -1);
    	header('Content-Type: image/png');
    	header('Cache-control: no-cache, no-store');
    	echo base64_decode($_png[$char]);
    
    	unset($_png);
    	exit;
    
  • includes/usercp_register.php[/color][/size]
  1. FIND - Line 110

    Code: Selecteer alles

    
    	$strip_var_list = array('username' => 'username', 'email' => 'email', 'icq' => 'icq', 'aim' => 'aim', 'msn' => 'msn', 'yim' => 'yim', 'website' => 'website', 'location' => 'location', 'occupation' => 'occupation', 'interests' => 'interests');
    	$strip_var_list['confirm_code'] = 'confirm_code';
    
    REPLACE WITH

    Code: Selecteer alles

    
    	$strip_var_list = array('email' => 'email', 'icq' => 'icq', 'aim' => 'aim', 'msn' => 'msn', 'yim' => 'yim', 'website' => 'website', 'location' => 'location', 'occupation' => 'occupation', 'interests' => 'interests', 'confirm_code' => 'confirm_code');
    
  2. FIND - Line 126

    Code: Selecteer alles

    
    	$trim_var_list = array('cur_password' => 'cur_password', 'new_password' => 'new_password', 'password_confirm' => 'password_confirm', 'signature' => 'signature');
    
    BEFORE, ADD

    Code: Selecteer alles

    
    	$username = ( !empty($HTTP_POST_VARS['username']) ) ? phpbb_clean_username($HTTP_POST_VARS['username']) : '';
    
    
  3. FIND - Line 301

    Code: Selecteer alles

    
    				if ($row['code'] != $confirm_code)
    
    BEFORE, ADD

    Code: Selecteer alles

    
    				// Only compare one char if the zlib-extension is not loaded
    				if (!@extension_loaded('zlib'))
    				{
    					$row['code'] = substr($row['code'], -1);
    				}
    
    
  • language/lang_english/lang_admin.php[/color][/size]
  1. FIND - Line 749

    Code: Selecteer alles

    
    //
    // That's all Folks!
    
    BEFORE, ADD

    Code: Selecteer alles

    
    //
    // Login attempts configuration
    //
    $lang['Max_login_attempts'] = 'Allowed login attempts';
    $lang['Max_login_attempts_explain'] = 'The number of allowed board login attempts.';
    $lang['Login_reset_time'] = 'Login lock time';
    $lang['Login_reset_time_explain'] = 'Time in minutes the user have to wait until he is allowed to login again after exceeding the number of allowed login attempts.';
    
    
  • language/lang_english/lang_main.php[/color][/size]
  1. FIND - Line 1021

    Code: Selecteer alles

    
    //
    // That's all, Folks!
    
    BEFORE, ADD

    Code: Selecteer alles

    
    $lang['Login_attempts_exceeded'] = 'The maximum number of %s login attempts has been exceeded. You are not allowed to login for the next %s minutes.';
    $lang['Please_remove_install_contrib'] = 'Please ensure both the install/ and contrib/ directories are deleted';
    
    
  • login.php[/color][/size]
  1. FIND - Line 60

    Code: Selecteer alles

    
    		$sql = "SELECT user_id, username, user_password, user_active, user_level
    
    REPLACE WITH

    Code: Selecteer alles

    
    		$sql = "SELECT user_id, username, user_password, user_active, user_level, user_login_tries, user_last_login_try
    
  2. FIND - Line 79

    Code: Selecteer alles

    
    				if( md5($password) == $row['user_password'] && $row['user_active'] )
    
    BEFORE, ADD

    Code: Selecteer alles

    
    				// If the last login is more than x minutes ago, then reset the login tries/time
    				if ($row['user_last_login_try'] && $board_config['login_reset_time'] && $row['user_last_login_try'] < (time() - ($board_config['login_reset_time'] * 60)))
    				{
    					$db->sql_query('UPDATE ' . USERS_TABLE . ' SET user_login_tries = 0, user_last_login_try = 0 WHERE user_id = ' . $row['user_id']);
    					$row['user_last_login_try'] = $row['user_login_tries'] = 0;
    				}
    				
    				// Check to see if user is allowed to login again... if his tries are exceeded
    				if ($row['user_last_login_try'] && $board_config['login_reset_time'] && $board_config['max_login_attempts'] && 
    					$row['user_last_login_try'] >= (time() - ($board_config['login_reset_time'] * 60)) && $row['user_login_tries'] >= $board_config['max_login_attempts'])
    				{
    					message_die(GENERAL_MESSAGE, sprintf($lang['Login_attempts_exceeded'], $board_config['max_login_attempts'], $board_config['login_reset_time']));
    				}
    
    
  3. FIND - Line 97

    Code: Selecteer alles

    
    					$admin = (isset($HTTP_POST_VARS['admin'])) ? 1 : 0;
    					$session_id = session_begin($row['user_id'], $user_ip, PAGE_INDEX, FALSE, $autologin, $admin);
    
    
    AFTER, ADD

    Code: Selecteer alles

    
    					// Reset login tries
    					$db->sql_query('UPDATE ' . USERS_TABLE . ' SET user_login_tries = 0, user_last_login_try = 0 WHERE user_id = ' . $row['user_id']);
    
    
  4. FIND - Line 115

    Code: Selecteer alles

    
    					$redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? str_replace('&', '&', htmlspecialchars($HTTP_POST_VARS['redirect'])) : '';
    					$redirect = str_replace('?', '&', $redirect);
    
    BEFORE, ADD

    Code: Selecteer alles

    
    					// Save login tries and last login
    					if ($row['user_id'] != ANONYMOUS)
    					{
    						$sql = 'UPDATE ' . USERS_TABLE . '
    							SET user_login_tries = user_login_tries + 1, user_last_login_try = ' . time() . '
    							WHERE user_id = ' . $row['user_id'];
    						$db->sql_query($sql);
    					}
    					
    
  • privmsg.php[/color][/size]
  1. FIND - Line 38

    Code: Selecteer alles

    
    $html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#');
    $html_entities_replace = array('&', '<', '>');
    
    REPLACE WITH

    Code: Selecteer alles

    
    $html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#', '#"#');
    $html_entities_replace = array('&', '<', '>', '"');
    
  • templates/subSilver/admin/board_config_body.tpl[/color][/size]
  1. FIND - Line 59

    Code: Selecteer alles

    
    		<td class="row2"><input class="post" type="text" size="3" maxlength="4" name="flood_interval" value="{FLOOD_INTERVAL}" /></td>
    	</tr>
    
    AFTER, ADD

    Code: Selecteer alles

    
    	<tr>
    		<td class="row1">{L_MAX_LOGIN_ATTEMPTS}<br /><span class="gensmall">{L_MAX_LOGIN_ATTEMPTS_EXPLAIN}</span></td>
    		<td class="row2"><input class="post" type="text" size="3" maxlength="4" name="max_login_attempts" value="{MAX_LOGIN_ATTEMPTS}" /></td>
    	</tr>
    	<tr>
    		<td class="row1">{L_LOGIN_RESET_TIME}<br /><span class="gensmall">{L_LOGIN_RESET_TIME_EXPLAIN}</span></td>
    		<td class="row2"><input class="post" type="text" size="3" maxlength="4" name="login_reset_time" value="{LOGIN_RESET_TIME}" /></td>
    	</tr>
    
  • templates/subSilver/admin/index_body.tpl[/color][/size]
  1. FIND - Line 46

    Code: Selecteer alles

    
    	<td class="row2"><b>{GZIP_COMPRESSION}</b></td>
      </tr>
    </table>
    
    AFTER, ADD

    Code: Selecteer alles

    
    
    <h1>{L_VERSION_INFORMATION}</h1>
    
    {VERSION_INFO}
    
    <br />
    
    
  2. FIND - Line 87

    Code: Selecteer alles

    
    
    <h1>{L_VERSION_INFORMATION}</h1>
    
    {VERSION_INFO}
    
    <br />
    
    REPLACE WITH (just remove the lines)

lang_admin.php

Code: Selecteer alles

// 
// Login attempts configuration 
// 
$lang['Max_login_attempts'] = 'Toegestane aantal loginpogingen'; 
$lang['Max_login_attempts_explain'] = 'Aantal toegestane pogingen om in te loggen op je forum'; 
$lang['Login_reset_time'] = 'Wachttijd tussen twee loginpogingen';
$lang['Login_reset_time_explain'] = 'Stel de tijd in waarop een gebruiker moet wachten als hij of zij het maximale aantal loginpogingen heeft overschreden'; 
lang_main:

Code: Selecteer alles

$lang['Login_attempts_exceeded'] = 'Het maximale aantal loginpogingen van %s pogingen is overschreden. Je zult niet binnen %s minuten kunnen inloggen'; 
$lang['Please_remove_install_contrib'] = 'Garandeer dat de install/ en contrib/ mappen zijn verwijderd'; 
Laatst gewijzigd door lunagang op 12 jan 2006, 08:33, 2 keer totaal gewijzigd.

ik ben gek
Berichten: 1496
Lid geworden op: 25 mei 2005, 14:09

Bericht door ik ben gek » 30 dec 2005, 15:02

NEE!!!!!
niet weer zo'n stomme update!

funyboyke
Berichten: 432
Lid geworden op: 16 dec 2005, 16:49
Locatie: BE: Antwerpen

Bericht door funyboyke » 30 dec 2005, 15:03

:shock: das een lange lijst, maar wel handig, bedankt

Gebruikersavatar
Paul
Beheerder
Beheerder
Berichten: 20315
Lid geworden op: 23 okt 2003, 11:38
Locatie: Utrecht
Contacteer:

Bericht door Paul » 30 dec 2005, 15:04

2.0.18 was veel langer, deze doe je vrij snel. Zijn vooral kleine wijzigingen :)

ik ben gek
Berichten: 1496
Lid geworden op: 25 mei 2005, 14:09

Bericht door ik ben gek » 30 dec 2005, 15:05

dat is waar.
5 tot 10 minuten.
volgens mij is dit een bugfix realase.

funyboyke
Berichten: 432
Lid geworden op: 16 dec 2005, 16:49
Locatie: BE: Antwerpen

Bericht door funyboyke » 30 dec 2005, 15:05

ah ok, maar ik heb nog maar net een forum, dus het is de eerste update voor mij :lol:

Gebruikersavatar
Bas
Berichten: 2741
Lid geworden op: 02 dec 2003, 17:38
Locatie: Omgeving Goslar (Duitsland)
Contacteer:

Bericht door Bas » 30 dec 2005, 15:06

Dat was 2.0.18 ook ;)

ik ben gek
Berichten: 1496
Lid geworden op: 25 mei 2005, 14:09

Bericht door ik ben gek » 30 dec 2005, 15:07

2.0.18 ook veiligheidslekken.
hier niet geloof ik als ik het zo is bekijk!

Gebruikersavatar
Paul
Beheerder
Beheerder
Berichten: 20315
Lid geworden op: 23 okt 2003, 11:38
Locatie: Utrecht
Contacteer:

Bericht door Paul » 30 dec 2005, 15:07

funyboyke schreef:ah ok, maar ik heb nog maar net een forum, dus het is de eerste update voor mij :lol:
Als je geen mods geinstalleerd hebt, kun je alle bestanden, behalve config.php gewoon overschrijven, en install/update_to_lateast.php uitveoren.
ik ben gek schreef:2.0.18 ook veiligheidslekken.
hier niet geloof ik als ik het zo is bekijk!
Hier ook, de XSS lek ;)

ik ben gek
Berichten: 1496
Lid geworden op: 25 mei 2005, 14:09

Bericht door ik ben gek » 30 dec 2005, 15:10

xss staat voor?

Gebruikersavatar
Paul
Beheerder
Beheerder
Berichten: 20315
Lid geworden op: 23 okt 2003, 11:38
Locatie: Utrecht
Contacteer:

Bericht door Paul » 30 dec 2005, 15:12

ik ben gek schreef:xss staat voor?
Cross site scripting :)

ik ben gek
Berichten: 1496
Lid geworden op: 25 mei 2005, 14:09

Bericht door ik ben gek » 30 dec 2005, 16:05

ik ben weer up to date!

ik ben gek
Berichten: 1496
Lid geworden op: 25 mei 2005, 14:09

Bericht door ik ben gek » 30 dec 2005, 16:31

ik kom er nu achter dat ik deze error heb:

Parse error: parse error, unexpected '\"' in /home/httpd/vhosts/rollercoasterparks.nl/httpdocs/forum/admin/admin_users.php on line 1159

Code: Selecteer alles

			$s_hidden_fields .= '<input type="hidden" name="new_user" value="'.$new_user.'" />';
			// End add - Admin add user MOD
			$s_hidden_fields .= '<input type="hidden" name="id" value="' . $user_id . '" />';
	>>errorregel<<	$s_hidden_fields .= '<input type="hidden" name="username" value="' . str_replace("\"", """, $username) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="email" value="' . str_replace("\"", """, $email) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="icq" value="' . str_replace("\"", """, $icq) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="aim" value="' . str_replace("\"", """, $aim) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="msn" value="' . str_replace("\"", """, $msn) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="yim" value="' . str_replace("\"", """, $yim) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="website" value="' . str_replace("\"", """, $website) . '" />';
			$s_hidden_fields .= '<input type="hidden" name="location" value="' . str_replace("\"", """, $location) . '" />';

Epic
Berichten: 16
Lid geworden op: 21 okt 2005, 11:44
Contacteer:

Bericht door Epic » 30 dec 2005, 23:32

Bij mij werkt na de update de quote-functie niet meer, hebben meer mensen daar last van?

jikker
Berichten: 43
Lid geworden op: 06 jan 2005, 17:31
Contacteer:

Bericht door jikker » 30 dec 2005, 23:35

Epic schreef:Bij mij werkt na de update de quote-functie niet meer, hebben meer mensen daar last van?
Die werkt bij mij wel,na update,maar bij mij is de bevestigings code die men bij het registreren moet invullen niet meer zichtbaar ( is nu een rood kruisje) ?

Eddy.

Gebruikersavatar
MandersOnline
Berichten: 735
Lid geworden op: 27 aug 2003, 22:58
Locatie: Amsterdam
Contacteer:

Bericht door MandersOnline » 30 dec 2005, 23:39

ik ben gek schreef:ik kom er nu achter dat ik deze error heb:

Parse error: parse error, unexpected '\"' in /home/httpd/vhosts/rollercoasterparks.nl/httpdocs/forum/admin/admin_users.php on line 1159
in de door jou opgegeven code kon ik geen fouten ontdekken, maar meen dat dat meestal te maken heeft met een missende ' of dat die niet afgesloten is met een ;

The Sting
Berichten: 762
Lid geworden op: 11 okt 2004, 16:12
Locatie: Brabant

Bericht door The Sting » 30 dec 2005, 23:52

Wat zou de reden zijn dat deze verwijdert wordt?.

Code: Selecteer alles

<h1>{L_VERSION_INFORMATION}</h1> 

{VERSION_INFO} 

<br />
Met groet, The Sting

Gebruikersavatar
MandersOnline
Berichten: 735
Lid geworden op: 27 aug 2003, 22:58
Locatie: Amsterdam
Contacteer:

Bericht door MandersOnline » 30 dec 2005, 23:54

The Sting schreef:Wat zou de reden zijn dat deze verwijdert wordt?.

Code: Selecteer alles

<h1>{L_VERSION_INFORMATION}</h1> 

{VERSION_INFO} 

<br />
Hij is evenstapje naar boven gegaan

FIND - Line 46

Code: Selecteer alles


	<td class="row2"><b>{GZIP_COMPRESSION}</b></td>
  </tr>
</table>
AFTER, ADD

Code: Selecteer alles



<h1>{L_VERSION_INFORMATION}</h1>

{VERSION_INFO}

<br />

[*]
FIND - Line 87

Code: Selecteer alles



<h1>{L_VERSION_INFORMATION}</h1>

{VERSION_INFO}

<br />
REPLACE WITH (just remove the lines) edit: ik typte beetje vaag :oops:
Laatst gewijzigd door MandersOnline op 30 dec 2005, 23:57, 2 keer totaal gewijzigd.

Epic
Berichten: 16
Lid geworden op: 21 okt 2005, 11:44
Contacteer:

Bericht door Epic » 30 dec 2005, 23:55

The Sting schreef:Wat zou de reden zijn dat deze verwijdert wordt?.

Code: Selecteer alles

<h1>{L_VERSION_INFORMATION}</h1> 

{VERSION_INFO} 

<br />
Die wordt alleen verplaatst

Code: Selecteer alles

#
#-----[ FIND ]---------------------------------------------
# Line 46
	<td class="row2"><b>{GZIP_COMPRESSION}</b></td>
  </tr>
</table>

#
#-----[ AFTER, ADD ]---------------------------------------------
# 

<h1>{L_VERSION_INFORMATION}</h1>

{VERSION_INFO}

<br />

The Sting
Berichten: 762
Lid geworden op: 11 okt 2004, 16:12
Locatie: Brabant

Bericht door The Sting » 30 dec 2005, 23:59

Epic schreef:
The Sting schreef:Wat zou de reden zijn dat deze verwijdert wordt?.

Code: Selecteer alles

<h1>{L_VERSION_INFORMATION}</h1> 

{VERSION_INFO} 

<br />
Die wordt alleen verplaatst
:idee: Had ik overheen gelezen, bedankt.

De volgende code deed mij denken dat ik iets kon stellen, maar krijg niets gevonden. Of zijn er defaults voor ingesteld en hoe staan die dan?.

Code: Selecteer alles

// 
// Login attempts configuration 
// 
$lang['Max_login_attempts'] = 'Allowed login attempts'; 
$lang['Max_login_attempts_explain'] = 'The number of allowed board login attempts.'; 
$lang['Login_reset_time'] = 'Login lock time'; 
$lang['Login_reset_time_explain'] = 'Time in minutes the user have to wait until he is allowed to login again after exceeding the number of allowed login attempts.'; 
Met groet, The Sting

Gesloten