Security Release - CB 1.0.1 - RELEASED!

17 years 9 months ago #19063 by rswennen
Replied by rswennen on topic Re:Security Release - CB 1.0.1 - RELEASED!
Beat,

you're a star.

One tiny problem though, the seach box in the CB members list is not working any more. When I change RG setting back to 1 it works again.

The strange thing however is your fix does include the search variable ? Any thoughts ?

Your JB fix on Joomla forum works great.

Post edited by: rswennen, at: 2006/08/18 15:22

Post edited by: rswennen, at: 2006/08/18 20:53

Please Log in to join the conversation.

17 years 9 months ago #19086 by beat
rswennen wrote:

Beat,

you're a star.

One tiny problem though, the seach box in the CB members list is not working any more. When I change RG setting back to 1 it works again.

The strange thing however is your fix does include the search variable ? Any thoughts ?

Your JB fix on Joomla forum works great.


Thanks :)

I fixed the code in the previous post (searches are posts not urls, so using $_REQUEST instead of $_GET should fix that).

Please confirm it works now (this site implements the final fix which is different).

Beat - Community Builder Team Member

Before posting on forums: Read FAQ thoroughly -- Help us spend more time coding by helping others in this forum, many thanks :)
CB links: Our membership - CBSubs - Templates - Hosting - Forge - Send me a Private Message (PM) only for private/confidential info

Please Log in to join the conversation.

17 years 9 months ago #19088 by rswennen
Replied by rswennen on topic Re:Security Release - CB 1.0.1 - RELEASED!
Yes Beat,

it's working now.

Thanks

Please Log in to join the conversation.

17 years 8 months ago #19249 by king.lui
Replied by king.lui on topic Re:Security Release - CB 1.0.1 - RELEASED!
Oh no, not really. That is a joke? I set register-globals=off and joomla emulate a register-globals=on? And when I'm stop the emulation, joomlaboeard and marketplace will stop working!

So first i must update to cb 1.0.1. i have many hacks, is there a list of updates files?

thanx for your joomlaboard-fix! but after quoting, it comes this warning:
Warning: Invalid argument supplied for foreach() in XXXXXXXX\includes\frontend.php on line 98

regards

beat wrote:

See front-page article update-errata...

Update: ERRATA: All sites should either update to CB 1.0.1 or correct a Joomla setting !

Just when you thought you were safe... A post less than an hour ago brought to our attention that Joomla 1.0.10 still emulates register_globals ON by default, even if php-setting register_globals is OFF. See the Joomla forum post by Adam (aka Websmurf) for instructions on how to turn it off. So: if you didn't or can't turn that off in that file, you should update Community Builder immediately to security release 1.0.1.


Post edited by: beat, at: 2006/08/17 01:42


Post edited by: king.lui, at: 2006/08/21 08:59

I know, my english seems a little .. unusual .. but really, it's not bad, it's only a bavarian version :whistle:

Please Log in to join the conversation.

17 years 8 months ago #19276 by rswennen
Replied by rswennen on topic Re:Security Release - CB 1.0.1 - RELEASED!
Solution is on JB forum

www.tsmf.net/component/option,com_simpleboard/Itemid,/func,view/catid,18/id,6650/#6650

change following 2 rows:

[code:1]. "\n AND m.access <= $my->gid"
. "\n AND ( mm.menuid = 0 $check_Itemid )"[/code:1]

into

[code:1]. "\n AND m.access <= '". $my->gid ."'"
. "\n AND ( mm.menuid = '". $Itemid ."' OR mm.menuid = 0 )"[/code:1]

Post edited by: rswennen, at: 2006/08/21 10:36

Please Log in to join the conversation.

17 years 8 months ago #19280 by king.lui
Replied by king.lui on topic Re:Security Release - CB 1.0.1 - RELEASED!

I read the posting re register_globals emulation mentioned above. I'd like to implement it, but my CB installs have a problem. I've completed the CB 1.0.1 upgrade (running J! 1.0.10 w/.htaccess set to RG=off). If I also change the setting in globals.php, on my user list the navigation stops working. Only the 1st page is displayed. The next, 1, 2, 3, etc, links only return the 1st page. Registration, login & all else is fine. It's just the user list. Has anyone else seen this? Any ideas on how to fix?

beat wrote:
Looking into this. Confirming this small problem of CB. Will PM/Email you shortly to test to check if other things go wrong ;)


i have the same problem. is there a workaround?
regards..

Post edited by: king.lui, at: 2006/08/21 13:08

I know, my english seems a little .. unusual .. but really, it's not bad, it's only a bavarian version :whistle:

Please Log in to join the conversation.

Moderators: beatnantkrileon
Time to create page: 0.243 seconds

Facebook Twitter LinkedIn