5581
Roby73
Re: Problem sql injection in search result
  • 2015/7/26 22:28

  • Roby73

  • Friend of XOOPS

  • Posts: 262

  • Since: 2011/6/15


In my newbb version don't have this problem.
My newbb is a mix from alfred and irmtfan module.



5582
Roby73
Problem sql injection in search result
  • 2015/7/26 22:08

  • Roby73

  • Friend of XOOPS

  • Posts: 262

  • Since: 2011/6/15


I have searched in xoops.org the string "pagenav select".
I have obtained the result, but when i have clicked on them i have received an sql injection error.
This is the code of the link:

https://xoops.org/modules/newbb/viewtopic.php?post_id=339377&keywords=pagenav+select


The "select" in keywords don't are sanitized in newbb module.



5583
jlm69
2.6.0 search module errors
  • 2015/7/26 11:45

  • jlm69

  • Module Developer

  • Posts: 719

  • Since: 2002/7/19


In the search, on my modules search pages, everything works perfectly. If I use Xoops search I get errors caused by using 'IN' in mysql. Xoops seems to not know what to do with 'IN'. It does not matter how I do it like this:

$criteria->add(new Criteria('cid', '('.$all_ids.')', 'IN'));

or like this

->andWhere($eb->in('cid', $jobs_ids))

like I said they work perfectly in the search within my modules, but if I try the search module it does not treat 'IN' properly.
In the first example it treats 'in' like '<>' which produces no results when there are results.

0.000310 - SELECT * FROM alumni_listing WHERE (valid = :dcValue1 AND cid <> cid AND name LIKE :dcValue2 OR mname LIKE :dcValue3
OR lname LIKE :dcValue4 OR year LIKE :dcValue5) ORDER BY date DESC LIMIT 5 OFFSET 0


In the second example it throughs an exeption.


You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use
near ')) AND ((title LIKE '%test%') OR (type LIKE '%test%') OR (company LIKE '%test%')' at line 1' in
LIB/vendor/doctrine/dbal/lib/Doctrine/DBAL/Driver/PDOStatement.php:91

If I remove the lines it works, except it shows all results even if you don't have permission to see them.

PHP - 5.6.10
MYSQL - 5.5.5-10.0.19-MariaDB

Thanks,
John



5584
jlm69
2.6.0 showing username and password in error message
  • 2015/7/26 11:41

  • jlm69

  • Module Developer

  • Posts: 719

  • Since: 2002/7/19


if the database goes down, even if logger is turned off in preferences, your username and password for mysql SHOWS
in the error message.

Just turn off mysql and try to use your site.

PHP - 5.6.10)
MYSQL - 5.5.5-10.0.19-MariaDB

Thanks,
John



5585
Mamba
Re: CKeditor by default
  • 2015/7/22 7:55

  • Mamba

  • Moderator

  • Posts: 11373

  • Since: 2004/4/23


1) You have to make sure that the files are copied in the correct directory overwriting the same files from CKeditor

2) After copying them, you need to run update on the "System" module, and on the modules that you want the CKeditor to be visible in.

3) Some older modules had the editors "hard-coded", i.e. if CKeditor was not included on the list, it will not be visible. Then you would need to find out if there is a newer version of that module that has been updated to include editors dynamically.
Support XOOPS => DONATE
Use 2.5.10 | Docs | Modules | Bugs



5586
Mamba
Re: problems since update to 2.5.7.1 -
  • 2015/7/22 7:52

  • Mamba

  • Moderator

  • Posts: 11373

  • Since: 2004/4/23


Quote:
then just started working

I am very happy to hear it!
Support XOOPS => DONATE
Use 2.5.10 | Docs | Modules | Bugs



5587
mbu10
Re: problems since update to 2.5.7.1 -
  • 2015/7/21 22:30

  • mbu10

  • Just popping in

  • Posts: 10

  • Since: 2009/1/7 1


well thanks to mamba,
i had always just copied the new files in and ran it and seemed to work
the /upgrade went through half a dozen updates
then just started working
thanks
so much



5588
Skype-Fr
CKeditor by default
  • 2015/7/21 15:34

  • Skype-Fr

  • Just popping in

  • Posts: 28

  • Since: 2006/4/27


Hi all ...

By default, I would like to use CKeditor (last version 4.5.1) with Xoops 2.5.7 (php 5.6) ..

I uploaded CKeditor and unzip into class/xoopseditor/ckeditor/,
I can see it with administration system settings but if I choose CKeditor, it does not display in modules.

How do I do ?

Regards.
Gilles




5589
Cesagonchu
Re: Bug in Xoopspoll 1.40 beta2




5590
slider84
Bug in Xoopspoll 1.40 beta2
  • 2015/7/20 8:41

  • slider84

  • Just popping in

  • Posts: 21

  • Since: 2013/8/16


Hi,

In file /modules/xoopspoll/templates/xoopspoll_results.tpl :

<{include file="db:xoopspoll_results_renderer.html"}>

must be replace by:
<{include file="db:xoopspoll_results_renderer.tpl"}>




TopTop
« 1 ... 556 557 558 (559) 560 561 562 ... 29425 »



Login

Who's Online

177 user(s) are online (73 user(s) are browsing Support Forums)


Members: 0


Guests: 177


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Jul 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits