172
From what I understand I think he means that yes. He means that it now safe to have that function enabled, no hackers can anymore include anyfile...
So people, this is a SAFE VERSION. I repeat, SAFE VERSION!
So people, this is a SAFE VERSION. I repeat, SAFE VERSION!
173
Well, I think the hole could be fixed immediatly, without all this press attention, if GIJOE mailed wjue in place of posting this sort of nonsense and recommending to remove that module (and ofcourse not saying clearly to install his -oh so perfect- module.
So, to make everything clear:
- There is no need to panic if you have register_globals off.
- If register_globals is on (what is needed for some old modules) then you might wanne turn it off or apply the fix from onokazu. (The fix works, even if someone else (like GIJOE for example) says it is not.)
And for now I stop posting in this thread, it is going way of the road...
Edit: Safe version:
https://xoops.org/modules/newbb/viewtopic.php?topic_id=16705&forum=4&post_id=70308
So, to make everything clear:
- There is no need to panic if you have register_globals off.
- If register_globals is on (what is needed for some old modules) then you might wanne turn it off or apply the fix from onokazu. (The fix works, even if someone else (like GIJOE for example) says it is not.)
And for now I stop posting in this thread, it is going way of the road...
Edit: Safe version:
https://xoops.org/modules/newbb/viewtopic.php?topic_id=16705&forum=4&post_id=70308
174
Ofcourse this is possible. Check theme.html, and make sure that the parts:
<{foreach item=block from=$xoops_clblocks}>
and
<{foreach item=block from=$xoops_crblocks}>
comes before:
<{foreach item=block from=$xoops_ccblocks}>
Edit: I see that Mithrandir already replied, sorry for double post.
<{foreach item=block from=$xoops_clblocks}>
and
<{foreach item=block from=$xoops_crblocks}>
comes before:
<{foreach item=block from=$xoops_ccblocks}>
Edit: I see that Mithrandir already replied, sorry for double post.
175
I'm suprised of this post by GIJOE. I always tought he was posting on a professional way, but this... Scaring people like hell and advicing to remove in place of fixing it. I hope not for own profit...
Check the post by onokazu:
http://www.xoopscube.jp/modules/news/article.php?storyid=195
You might check the Agenda-X 2.0 beta 2 version, I don't think this version has any security flaw. (edit: beta 2 has, rc hasn't)
http://sourceforge.net/project/showfiles.php?group_id=83736&package_id=109895
And again, if you goto the post by Onokazu there is a fix listed.
Update: New version released:
https://xoops.org/modules/mydownloads/singlefile.php?cid=24&lid=442
Check the post by onokazu:
http://www.xoopscube.jp/modules/news/article.php?storyid=195
You might check the Agenda-X 2.0 beta 2 version, I don't think this version has any security flaw. (edit: beta 2 has, rc hasn't)
http://sourceforge.net/project/showfiles.php?group_id=83736&package_id=109895
And again, if you goto the post by Onokazu there is a fix listed.
Update: New version released:
https://xoops.org/modules/mydownloads/singlefile.php?cid=24&lid=442
176
System Admin - Settings 
But default it is off, so if you don't know what it is, you prolly didn't turn it on, and it is prolly no the solution...
But default it is off, so if you don't know what it is, you prolly didn't turn it on, and it is prolly no the solution...
178
Maybe this can help. Not exactly documentation but HEY... :)
http://xoops.opencms.nl/modules/mydownloads/singlefile.php?lid=19
http://xoops.opencms.nl/modules/mydownloads/singlefile.php?lid=19
180
Yes idd I'm the smartass. Cool huh...
No serious, you might wanne upload the main.php from the previous version untill there is a fix. Goodluck with it.
No serious, you might wanne upload the main.php from the previous version untill there is a fix. Goodluck with it.
Login
Search
Recent Posts
Who's Online
Donat-O-Meter
| Stats | |
| Goal: | $100.00 |
| Due Date: | May 31 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|