PEAK XOOPS - newbb patch for XOOPS 2.0.6RC in englishin japanese






Main : XOOPS Hacks : 

Category: XOOPS Hacks          
Download Now! newbb patch for XOOPS 2.0.6RC Popular Version: 2.0.6RC
Submitted Date:  2004/2/3
Description:
newbb in XOOPS 2.0.6RC has a bug.
To fix this bug, overwrite four files in this archive into your XOOPS 2.0.6RC.

modules/newbb/viewforum.php
modules/newbb/viewtopic.php
modules/newbb/class/class.forumposts.php
modules/newbb/include/search.inc.php

---------------
2004/2/3 updated

- newbb XSS security hole fixed
see SecurityTracker.com Archives - Xoops Input Validation Flaw in 'newbb' Module Permits Cross-Site Scripting Attacks

-----------------------------------------------------------
(For Japanese)

XOOPS2.0.6RC付属の公式フォーラムモジュールnewbbにはバグがあって、正しく投稿を表示できません。
このアーカイブに含まれている4つのファイルを上書きすることで、修正することができます。
なお、2004/2/1頃に見つかった、newbbのクロスサイトスクリプティング脆弱性も、このパッチを適用することで修正されます。

Downloaded 5927 times  5927  File Size 8.06 KB  Supported Platforms tar.gz  Home Page http://www.peak.ne.jp/
Modify | Report Broken File | Tell a Friend | Comments (1)


Comments list

GIJOE  Posted on 2004/1/29 12:04
hi koot68

Quote:
Notice [PHP]: Undefined index: nosmiley in file modules/newbb/post.php line 166
Notice [PHP]: Undefined index: icon in file modules/newbb/post.php line 167
Notice [PHP]: Undefined index: attachsig in file modules/newbb/post.php line 168
At least, these 3 sentences is not bug, but only a notice.

Quote:
I also see the "Thanks for submitting..." box above it, but I'm still not able to see any topic text. This is with the topics I converted over from PhpBB also. I see the topics, but I'm not able to read any of the posts.
Perhaps, the topics converted from phpBB cause some trouble.
As I don't know how do you covert, I can't advise any more.
koot68  Posted on 2004/1/29 4:33
I am aware that you are not responcible for Xoops. Unfortunatly I am not getting any help on xoops.org. It seems that the post text is not making to the database, or is not being read from the database.
GIJOE  Posted on 2004/1/28 10:13
I'm not a member of XOOPS core team, and
I don't have any responsibility about newbb without codes from my hack (post_id available even if more 10 posts in a thread).

You should ask it www.xoops.org.
koot68  Posted on 2004/1/28 6:59
I made sure to copy the files in place. Although I know I copied them there, I wrote over them again. Now I'm getting a Post error with the post.php file.

This is what I see when I submit a post:

Notice [PHP]: Undefined index: nosmiley in file modules/newbb/post.php line 166
Notice [PHP]: Undefined index: icon in file modules/newbb/post.php line 167
Notice [PHP]: Undefined index: attachsig in file modules/newbb/post.php line 168

I also see the "Thanks for submitting..." box above it, but I'm still not able to see any topic text. This is with the topics I converted over from PhpBB also. I see the topics, but I'm not able to read any of the posts.
GIJOE  Posted on 2004/1/28 5:30
Perhaps you failed to copy 3 files into right place.

viewtopic.php should be copied /home/virtual/site87/fst/var/www/html/x2/modules/newbb/ in your environment.
koot68  Posted on 2004/1/28 5:04
Even with installing this patch, I'm still recieving a Fatal Error:

"Fatal error: Cannot pass parameter 4 by reference in /home/virtual/site87/fst/var/www/html/x2/modules/newbb/viewtopic.php on line 256"
Login
Username or e-mail:

Password:

Remember Me

Lost Password?

Register now!