1241
wishcraft
Re: Mass Email invitations module

I will write a module for this!! Will have it release within the next couple of weeks.

Allow your members to:
* invite a friend
* to your network.

Our friends invitation software will allow them to import contacts from their email account.

Networks supported will include:

* Hotmail contacts importer
* Windows Live contacts importer
* Yahoo contacts importer
* AOL contacts importer
* Gmail contacts importer
* Lycos
* Rediffmail contacts importer
* Indiatimes contacts importer
* Mail.com contacts importer
* ICQ contacts importer
* Outlook express contacts importer
* Microsoft Outlook
* many more.

Contacts are imported directly through your website, giving our users more security and peace of mind. The user friendly interface encourages your members to actively invite their friends to "join" them on your network.

Support will also include:

* Redirection after import is complete.
* User customised invite script.
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1242
wishcraft
Re: PLEASE HELP IMMEDIATELY!! :'(

Seems to load for me What was the problem?
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1243
wishcraft
Re: Multiple SQL injection exploit in xtorrent module

Ok vaughan, just for you I fixed this morning, before work starts..

The new CRC32 for x-torrent 1.30Rc is

md5: 537bcdc64a6c397d52b35ad2b7d3281c

crc32: 5b763615
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1244
wishcraft
Re: Multiple SQL injection exploit in xtorrent module

Yeah but I still want to see you remove the image that shows that it is blank!! Thats a hack... Retrieving some details isn't really a hack, beside I don't run protector on that system.

Alright Vaughan just for you, don't you feel special, I will fix it, but after my days work is finished.

But you still haven't answered my question about the domain path, it had nothing to do with SEO'n that is just the interum..

So I will ask it again:

If SQL Injestion was such a problem why do people make domains like the ones you can see on bankfees.net.au?

They are dynamic and there is no reprogramming of the .htaccess file to make them work.. It is all dynamic to the user content.
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1245
wishcraft
Re: Multiple SQL injection exploit in xtorrent module

Quote:

Quote:

Btw, you still haven't answer my question.. That if this was such a problem why do poeple do URL paths like this:

http://www.bankfees.net.au/forums/Credit_Unions/Credit_Unions/

or

http://www.bankfees.net.au/forums/Credit_Unions

and so on.


why? because it's better for SEO and it's also easier on the eyes and memory, but has nothing to do with preventing sql injection.


But Vaughan, you see the SQL Injection problem happens again like
http://www.bankfees.net.au/forums/Credit_Unions"%20union%20select%20uname,null,null,null,null,null%20from%20xoops_users%20where%20uid=1/

Luckly I SEF it before parsing it so it doesn't do anything, perhaps you should stick to something that does the programming for you monty like ruby on rails or something.
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1246
wishcraft
Re: Multiple SQL injection exploit in xtorrent module

Sorry Vaughan I am going to have to do you in the full monty here.

http://www.unseen.org.au/modules/xtorrent/viewcat.php?cid=1%20un_ion%20select%20uname,null,null,null,null,null%20from%20_unseen2_users%20where%20uid=1


doesn't do a thing on the server, just displays this:

Resized Image

Absolutely nothing, I tried you example with the other files in the system and still absolutely nothing that was critical..

Mind you vaughan I am not saying I am not going to fix the example you have put up, but I am not going to do it immediately, I have some changes to make to the system anyway..

I tell you what if you can do a hack that is through the URL remove the image that shows how your example just display a blank page that does nothing, then I will find that amuzing.
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1247
wishcraft
Re: Multiple SQL injection exploit in xtorrent module

Well Vaughan from ImpressCMS, if that is even your real name.. I don't know I have been reading reports that someone is trying to funnel even my donation to Xoops.org from xoops... Thats why I am friend with xoops..

Well i tryed your vunrability and several other and all they seem to produce is a blank page on the cms...

Hey everyone try it on my development server

http://www.unseen.org.au/modules/xtorrent/viewcat.php?cid=1%20un_ion%20select%20uname,null,null,null,null,null%20from%20xoops_users%20where%20uid=1


Wouldn't if you are from ImpressCMS like your email states, with this link, already have a username on xoops? Or be on of the banned people.

All it seems to do is produce a blank result.. It doesn't display anything?>?

Your a script kiddy congradulations. I have been programming for 20 years, more or less in the compilers not scripting languages like PHP.. And SQL injestion is something that exist in most libraries, somehow the other side of the system will counter for it, like the need for a smarty variable to display the data or a textbox... If this doesn't exist then it not a problem..

If you want to get involved with the x-torrent project then do so -- make an application athttp://www.sourceforge.org/project/x-Torrent/ but otherwise, don't contact me again thank Vaughan


Btw, you still haven't answer my question.. That if this was such a problem why do poeple do URL paths like this:

http://www.bankfees.net.au/forums/Credit_Unions/Credit_Unions/

or

http://www.bankfees.net.au/forums/Credit_Unions

and so on.
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1248
wishcraft
Re: url rewright

Generally you can do SEO optimization/URL Rewrites with a .htaccess file, Have a look how I have done it for the announce in X-Torrent as an example, you will generally have to rewrite the code to look up information that is provided to it with some SQL injections.

and example of using a .htaccess file would be something likehttp://www.seo-solutions.co.in/freetools/Simple_Submission for the content module provided in the community modules packages.
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1249
wishcraft
Re: x-torrents 1.06 error

btw. Peter,

If you want to move your announce tohttp://yoursite.com/announce orhttp://yoursite.com/announce/

You will need to put these lines in your .htaccess file in the XOOPS root path.

Quote:

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^announce/?passkey=([a-zA-Z0-9\ \'\_]+)$ modules/xtorrent/announce.php?passkey=$1 [L,NC,QSA]
RewriteRule ^announce?passkey=([a-zA-Z0-9\ \'\_]+)$ modules/xtorrent/announce.php?passkey=$1 [L,NC,QSA]
RewriteRule ^announce/ modules/xtorrent/announce.php [L,NC,QSA]
RewriteRule ^announce modules/xtorrent/announce.php [L,NC,QSA]


There is an option in the preferences, that is for SEO this path currently it would look like..

http://www.yoursite.com/modules/xtorrent/announce.php

you will need to also change this to

http://www.yoursite.com/announce/ orhttp://www.yoursite.com/announce
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts



1250
wishcraft
Re: Show us the $$$....!

Post content removed by request because:

1. the post contained the text of an email for which permission to publish was not given

2. the post published an email address of another user. This user did not want it published in the forums.

3. the original post made derogatory statements about another user of these forums and another CMS project. This is not acceptable.

The content of the original post has been saved.

The request was for the thread to be removed; this didn't seem appropriate given that t has only just been restored to public view.

In removing the original post I've steered the middle ground. Either that or I'm getting splinters in my bum from sitting on the fence. Guess that depends on your viewpoint

John V
(JAVesey - Forum Moderator)
Resized Image
www.ohloh.net/accounts/226400

Follow, Like & Read:-

twitter.com/RegaltyFamily
github.com/Chronolabs-Cooperative
facebook.com/DrAntonyRoberts




TopTop
« 1 ... 122 123 124 (125) 126 127 128 ... 135 »



Login

Who's Online

92 user(s) are online (45 user(s) are browsing Support Forums)


Members: 0


Guests: 92


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits