22
all i did was change in modules/profiles/userinfo.php
and all my users are directed to yogurt, i did not need to add any files to yogurt.
after this
$uid = intval($_GET['uid']);
if ($uid <= 0) {
if (is_object($xoopsUser)) {
$uid = $xoopsUser->getVar('uid');
} else {
header('location: ' . XOOPS_URL);
exit();
}
}
Add:
header("Location:".XOOPS_URL."/modules/yogurt/index.php?uid=".$uid);
exit();
that is all I needed to do.
and all my users are directed to yogurt, i did not need to add any files to yogurt.
after this
$uid = intval($_GET['uid']);
if ($uid <= 0) {
if (is_object($xoopsUser)) {
$uid = $xoopsUser->getVar('uid');
} else {
header('location: ' . XOOPS_URL);
exit();
}
}
Add:
header("Location:".XOOPS_URL."/modules/yogurt/index.php?uid=".$uid);
exit();
that is all I needed to do.
23
Hi all,
Yogurt is awesome and I use it there is like 2 main issues,
and this is one of them
I use Yogurt profile integration link in /modules/profile/userinfo.php
where I added
header("Location:".XOOPS_URL."/modules/yogurt/index.php?uid=".$uid);
exit();
---------------------
Now the issue I have is now there is no way for my users to change there own password as
http://tibiafriends.com/modules/profile/userinfo.php?uid=1
will send the user to Yogurt and Not the core profile, and so theirs no way for users to change password.
The reason I use the hack above is so when users click on a users name in the site they go to Yogurt Profile and not the standard XOOPS one.
HELP HELP.
Users need a way to change passwords
Please anyone that has any idea of how I can go about this let me know.
Kind Regards
Kiwi Chris.
Yogurt is awesome and I use it there is like 2 main issues,
and this is one of them
I use Yogurt profile integration link in /modules/profile/userinfo.php
where I added
header("Location:".XOOPS_URL."/modules/yogurt/index.php?uid=".$uid);
exit();
---------------------
Now the issue I have is now there is no way for my users to change there own password as
http://tibiafriends.com/modules/profile/userinfo.php?uid=1
will send the user to Yogurt and Not the core profile, and so theirs no way for users to change password.
The reason I use the hack above is so when users click on a users name in the site they go to Yogurt Profile and not the standard XOOPS one.
HELP HELP.
Users need a way to change passwords
Please anyone that has any idea of how I can go about this let me know.
Kind Regards
Kiwi Chris.
24
Hi Everyone,
This issue outlined above is still happening, the real issue I have is I only know about this when a user msgs me to let me know.
there seems to be an issue with the friend petition that stops a user from being able to see there profile, I can fix it when I am told about it by deleting any petition with that has there Userid in it.
I am hoping that someone may take a moment to help me fix this, or at least point me in a direction.
This issue outlined above is still happening, the real issue I have is I only know about this when a user msgs me to let me know.
there seems to be an issue with the friend petition that stops a user from being able to see there profile, I can fix it when I am told about it by deleting any petition with that has there Userid in it.
I am hoping that someone may take a moment to help me fix this, or at least point me in a direction.
25
Hi, Question,with spiders now basically being seen as a Member to my site.
I am guessing this may affect my visitor stats?
Or will they be disregarded as usual.
Also is it possible to prevent these profiles been seen by the other members as this could
cause confusion within my site as its a social site, I could have Real member mistaking them
for real people.
Thanks.
I am guessing this may affect my visitor stats?
Or will they be disregarded as usual.
Also is it possible to prevent these profiles been seen by the other members as this could
cause confusion within my site as its a social site, I could have Real member mistaking them
for real people.
Thanks.
26
This Module was a real headache for me, it killed my site like your saying and took a lot of work to get it right again.
I did try in the end to follow the steps one by one but all I got was a headache.
I decided what I had was working fine so I have not used MP Manager.
I did try in the end to follow the steps one by one but all I got was a headache.
I decided what I had was working fine so I have not used MP Manager.
27
There is an option to use SSL on login but its only a option for users it does not force users.
and your right registration and edit profile should also be SSL
and your right registration and edit profile should also be SSL
28
This is a really good idea and should be in the core,
Hope we can get this working.
I have tagged this I hope you find a way to make this work, security is important.
Hope we can get this working.
I have tagged this I hope you find a way to make this work, security is important.
29
This has now been resolved.
This issue was to do with Friendship Petition I deleted the affected users xoops_yogurt_friendpetition from the database and then they were able to see there own profile.
This was seriously concerning me, but now I am happy.
This issue was to do with Friendship Petition I deleted the affected users xoops_yogurt_friendpetition from the database and then they were able to see there own profile.
This was seriously concerning me, but now I am happy.
30
I am pleased for this post as I had the same issue with 3 of my members and after deleting the friend petitions for those users they are now fixed.
Any word on the safety of Yogurt??
Is there anything that I can do to patch the hole?
This is what I have read
Yogurt Social Network contains a flaw that allows a remote
cross site scripting attack.This flaw exists because
the application does not validate 'uid' variable upon
submission to Multiple scripts script in yogurt module.
This could allow a user to create a specially crafted URL
that would execute arbitrary code in a user's browser within
the trust relationship between the browser and the server,
leading loss ofintegrity.
This was referring to RC1.
I would like to know if this is still the case, and if so any ideas on what I can do to plug this hole?
Any word on the safety of Yogurt??
Is there anything that I can do to patch the hole?
This is what I have read
Yogurt Social Network contains a flaw that allows a remote
cross site scripting attack.This flaw exists because
the application does not validate 'uid' variable upon
submission to Multiple scripts script in yogurt module.
This could allow a user to create a specially crafted URL
that would execute arbitrary code in a user's browser within
the trust relationship between the browser and the server,
leading loss ofintegrity.
This was referring to RC1.
I would like to know if this is still the case, and if so any ideas on what I can do to plug this hole?
Login
Search
Recent Posts
Who's Online
Donat-O-Meter
| Stats | |
| Goal: | $100.00 |
| Due Date: | Apr 30 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|