Portal 1.3
By: Dragoran
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| June 21 2006, 04:08 PM | |
|---|---|
| by JonnyBocker |
I just installed... but how do i view the page?
|
| June 11 2006, 11:41 PM | |
| by pjFalcon |
How can I edit the title of the Portal Page? I want to change the title from "Portal" to something that suits my site better.
|
| February 10 2006, 08:06 PM | |
| by Darken |
Thank you for help.
 I did the manipulation. All seems to works fine except the default page is empty.  thanx in advance for your help Peter! I'm going to try to find the problem. While hoping that you have the solution. --- Edit: Nevermind, all works fine now. |
| February 10 2006, 06:17 PM | |
| by Pit |
Ok, I will show here the changes for 1.4.7. I have marked my modifications in red.
QUOTE if(isset($ibforums->input['site']) && $ibforums->input['site']>0) { $where="id='".intval($ibforums->input['site'])."'"; } else { $where="start=1"; } $DB->simple_construct( array( 'select' => 'id,name,leftw,middlew,rightw,cols', 'from' => 'portal_sites ', 'where' => $where ) ); $DB->simple_exec(); if (!$DB->get_num_rows()) { $DB->simple_construct( array( 'select' => 'id,name,leftw,middlew,rightw,cols', 'from' => 'portal_sites ', 'where' => "id='".max(1,$this->settings['portal_default_page'])."'", ) ); $DB->simple_exec(); } $r=$DB->fetch_row(); $r['cols']=unserialize($r['cols']); Please notice, that CODE $this->settings['portal_default_page']=(isset($ibforums->input['site'])) ? $ibforums->input['site']:$r['id']; has been removed. PS.: Unfortunately all leading blanks are removed by the QUOTE-tag. |
| February 9 2006, 01:43 AM | |
| by Darken |
QUOTE(Pit @ Feb 8 2006, 08:10 PM) [snapback]1639303[/snapback] Hi Darken, unfortunately both versions are affected by the same security holes. Both fixes must be applied to the 1.4.7 in a similar way. Hi Peter, This part of code don't exist on Portal 1.4.7: --- Original 1.3-2 Dragoran Portal --- CODE if(!isset($ibforums->input['site'])) { $site=$this->settings['portal_default_page']; } else { $site=$ibforums->input['site']; } $DB->query("SELECT leftw,middlew,rightw from ibf_portal_sites WHERE id={$site}"); $r=$DB->fetch_row(); $this->middle .= "<br/><div align='center'>© Portal {$this->version} by <a href='http://www.ibforen.de/forum/index.php?showuser=257' target='_blank'>Dragoran</a></div>"; Then, I really don't see where that I could apply this correction. Let's say that my knowledge in the correction of security are limited. CODE if(!isset($ibforums->input['site']))
{ $site=$this->settings['portal_default_page']; } else { $site=intval($ibforums->input['site']); } $DB->query("SELECT leftw,middlew,rightw from ibf_portal_sites WHERE id='{$site}'"); if (!$DB->get_num_rows()) { $DB->query("SELECT leftw,middlew,rightw from ibf_portal_sites WHERE id='".max(1,intval($this->settings['portal_default_page']))."'"); } $r=$DB->fetch_row(); $this->middle .= "<br/><div align='center'>© Portal {$this->version} by <a href='http://www.ibforen.de/forum/index.php?showuser=257' target='_blank'>Dragoran</a></div>"; |
| February 9 2006, 01:10 AM | |
| by Pit |
Hi Darken,
unfortunately both versions are affected by the same security holes. Both fixes must be applied to the 1.4.7 in a similar way. |
| February 9 2006, 01:01 AM | |
| by Darken |
hummm, one part of Peter (IBForen.de) fix can be applicable to the version 1.4.7 (function last_topics).
|
| February 8 2006, 09:33 AM | |
| by MacTV | |
| February 5 2006, 12:41 PM | |
| by ojb |
i got taken down today by a hacker exploiting this security hole...
i advise all to update ASAP |
| February 5 2006, 10:32 AM | |
| by MacTV | |
