 |
|
Re:Security Release - CB 1.0.1 - RELEASED!
|
|
Date: 2006/08/18 15:03
|
By: rswennen
|
Status: User
|
|
|
Karma: 0
|
|
Junior Joomlapolitan
| Posts: 33 |   |
|
|
Beat,
you're a star.
One tiny problem though, the seach box in the CB members list is not working any more. When I change RG setting back to 1 it works again.
The strange thing however is your fix does include the search variable ? Any thoughts ?
Your JB fix on Joomla forum works great.
Post edited by: rswennen, at: 2006/08/18 15:22
Post edited by: rswennen, at: 2006/08/18 20:53
|
|
The administrator has disabled public write access. |
|
 |
|
Re:Security Release - CB 1.0.1 - RELEASED!
|
|
Date: 2006/08/18 23:29
|
By: beat
|
Status: Admin
|
|
|
Karma: 256
|
|
Admin
| Posts: 4215 | |
|
|
rswennen wrote:
Beat,
you're a star.
One tiny problem though, the seach box in the CB members list is not working any more. When I change RG setting back to 1 it works again.
The strange thing however is your fix does include the search variable ? Any thoughts ?
Your JB fix on Joomla forum works great.
Thanks 
I fixed the code in the previous post (searches are posts not urls, so using $_REQUEST instead of $_GET should fix that).
Please confirm it works now (this site implements the final fix which is different).
Beat  - Developer on Community Builder core Team
- If you like CB and this forum, you will love Nick's CB 1.2 RC4 reference manual ! : Click here to Get it now
- Would like to help us move faster ? Get it, and/or help us spend more time coding by helping others in this forum, many thanks
|
|
|
The administrator has disabled public write access. |
|
|
|
|
Re:Security Release - CB 1.0.1 - RELEASED!
|
|
Date: 2006/08/18 23:38
|
By: rswennen
|
Status: User
|
|
|
Karma: 0
|
|
Junior Joomlapolitan
| Posts: 33 | |
|
|
Yes Beat,
it's working now.
Thanks
|
|
|
The administrator has disabled public write access. |
|
 |
|
Re:Security Release - CB 1.0.1 - RELEASED!
|
|
Date: 2006/08/21 00:49
|
By: king.lui
|
Status: User
|
|
|
Karma: 10
|
|
Expert Joomlapolitan
| Posts: 101 | |
|
|
Oh no, not really. That is a joke? I set register-globals=off and joomla emulate a register-globals=on? And when I'm stop the emulation, joomlaboeard and marketplace will stop working!
So first i must update to cb 1.0.1. i have many hacks, is there a list of updates files?
thanx for your joomlaboard-fix! but after quoting, it comes this warning:
Warning: Invalid argument supplied for foreach() in XXXXXXXXincludesfrontend.php on line 98
regards
beat wrote:
See front-page article update-errata...
Update: ERRATA: All sites should either update to CB 1.0.1 or correct a Joomla setting !
Just when you thought you were safe... A post less than an hour ago brought to our attention that Joomla 1.0.10 still emulates register_globals ON by default, even if php-setting register_globals is OFF. See the Joomla forum post by Adam (aka Websmurf) for instructions on how to turn it off. So: if you didn't or can't turn that off in that file, you should update Community Builder immediately to security release 1.0.1.<br><br>Post edited by: beat, at: 2006/08/17 01:42
Post edited by: king.lui, at: 2006/08/21 08:59
I know, my english seems a little .. unusual .. but really, it's not bad, it's only a bavarian version 
|
|
|
The administrator has disabled public write access. |
|
|
|
|
Re:Security Release - CB 1.0.1 - RELEASED!
|
|
Date: 2006/08/21 10:34
|
By: rswennen
|
Status: User
|
|
|
Karma: 0
|
|
Junior Joomlapolitan
| Posts: 33 | |
|
|
Solution is on JB forum
http://www.tsmf.net/component/option,com_simpleboard/Itemid,/func,view/catid,18/id,6650/#6650
change following 2 rows:
| Code: |
. "\n AND m.access <= $my->gid"
. "\n AND ( mm.menuid = 0 $check_Itemid )"
|
into
| Code: |
. "\n AND m.access <= '". $my->gid ."'"
. "\n AND ( mm.menuid = '". $Itemid ."' OR mm.menuid = 0 )"
|
Post edited by: rswennen, at: 2006/08/21 10:36
|
|
|
The administrator has disabled public write access. |
|
|
|
|
Re:Security Release - CB 1.0.1 - RELEASED!
|
|
Date: 2006/08/21 12:07
|
By: king.lui
|
Status: User
|
|
|
Karma: 10
|
|
Expert Joomlapolitan
| Posts: 101 | |
|
|
I read the posting re register_globals emulation mentioned above. I'd like to implement it, but my CB installs have a problem. I've completed the CB 1.0.1 upgrade (running J! 1.0.10 w/.htaccess set to RG=off). If I also change the setting in globals.php, on my user list the navigation stops working. Only the 1st page is displayed. The next, 1, 2, 3, etc, links only return the 1st page. Registration, login & all else is fine. It's just the user list. Has anyone else seen this? Any ideas on how to fix?
beat wrote:
Looking into this. Confirming this small problem of CB. Will PM/Email you shortly to test to check if other things go wrong 
i have the same problem. is there a workaround?
regards..
Post edited by: king.lui, at: 2006/08/21 13:08
I know, my english seems a little .. unusual .. but really, it's not bad, it's only a bavarian version
|
|
|
The administrator has disabled public write access. |
|
|
