32
WF-Downloads version 3
Release Date: sat: 24 december 2005
The file size nor # of downloads never changes from 0
after a file is submitted. The previous version it
worked fine.
Release Date: sat: 24 december 2005
The file size nor # of downloads never changes from 0
after a file is submitted. The previous version it
worked fine.
33
Secunia Advisory: SA18767 Print Advisory
Release Date: 2006-02-10
Critical:
Moderately critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: FCKeditor 2.x
Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.
Description:
rgod has discovered a vulnerability in FCKeditor, which potentially can be exploited by malicious people to compromise a vulnerable system.
The problem is that it is possible to upload arbitrary files to a location inside the web root if the file extension does not match the list of denied file extensions. This can e.g. be exploited to upload and execute a malicious PHP script with the ".php.txt" file extension.
Successful exploitation requires that file uploads have been enabled in the "config.php" configuration file (not enabled by default).
The vulnerability has been confirmed in version 2.2 and has also been reported in version 2.0. Other versions may also be affected.
Solution:
Disable file uploads in "config.php".
Source:
http://secunia.com/advisories/18767/
Release Date: 2006-02-10
Critical:
Moderately critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: FCKeditor 2.x
Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it.
Description:
rgod has discovered a vulnerability in FCKeditor, which potentially can be exploited by malicious people to compromise a vulnerable system.
The problem is that it is possible to upload arbitrary files to a location inside the web root if the file extension does not match the list of denied file extensions. This can e.g. be exploited to upload and execute a malicious PHP script with the ".php.txt" file extension.
Successful exploitation requires that file uploads have been enabled in the "config.php" configuration file (not enabled by default).
The vulnerability has been confirmed in version 2.2 and has also been reported in version 2.0. Other versions may also be affected.
Solution:
Disable file uploads in "config.php".
Source:
http://secunia.com/advisories/18767/
34
Quote:
We going to split hairs or talk about the issue?
Clever wrote:
Aaaahhh.........
This would be the place for that then!
XOOPS.org feedback & suggestions
CLICK HERE
We going to split hairs or talk about the issue?
35
I am pretty sure the undertone question is, is this going to be changed, reverted back? Didnt think I needed to spell it out. heh
36
I do not know why the developers made it vastly more difficult to remove members on 2.2.3 vs 2.0.13 but I'd like to see this restored.
It should be a simple matter of seaching for members on the admin menu with certain critera, hit the sleect all check box then use the pull down menu to select 'delete'. However the only option currently is 'email'.
I much perfered the way 2.0.13 handled this. It's much more difficult to mass remove members in 2.2.3
It should be a simple matter of seaching for members on the admin menu with certain critera, hit the sleect all check box then use the pull down menu to select 'delete'. However the only option currently is 'email'.
I much perfered the way 2.0.13 handled this. It's much more difficult to mass remove members in 2.2.3
37
I was using ircmod module and my upgrade to 2.2.3a broke the java script. I have not had the time to try a different module. Perhaps another one works.
38
Well said Madfish, also I respect your recent post on the logo comments. Well said. Its refreshing to see a someone with a dev logo acually acknowledge there is community unrest with the current 'leadership'.
39
> IMHO, effective management requires more than just an effective manager (singular). It requires an effective manager + good communication skills + a team that is willing to be managed.
I could not agree more. Well said.
> For the most part, we have all of the above. We could certainly improve in some areas, but that is the case with all situations.
Thats rose colored glasses on your part. And a prime example of whats is wrong with this project on a mgt level. It seems all the staff here want to focus in and pat each other on the back for all the good points and drag feet or ignore the issues that need to be addressed.
Yes, you ask 'what needs to be improved' and such as this thread shows. However I have yet to see any real improvments and you people keep tripping all over yourself time and time and time again. You seem to have the 8 sec memory of a goldfish. At least thats the impression I am left with accurate or not.
How many times in the past 24 months that I have used XOOPS have the staff taken heat for lack of communication to the community? And yet you just did it AGAIN. Seriously, then you act all perplexed when ppl get upset or act like its a first time offense.
> Personally, I believe Herko is a fine Project manager with very good communication skills. We have a very good team of Team Leaders who are progressing every day in their individual responsibilities as well as their communication skills with their teams and with each other.
Thats great... how about they use some of the skill with the community?
> Where I see the greatest room for improvement is communication with the community and the communities willingness to work with the Core Team.
Less talk more action would be good. Can post all day about these issues, I see no action upon it however.
> There seems to be a lot of complaining going on, but very little action.
Since the dev team is running the show THEY need to identify the issues and start the correction. We as the community cant do much at this point until they acknowledge the issues and reach out to the community. THEY need to take the first step of good will not us. We have done all we can up to this point. We have explained a dozen times over our disatification and given some areas that needs to be addressed. What do you propose else we can do?
Start forking the community?
> From the standpoint of a Team Leader, I find it hard to invest my time with someone when they complain, but offer no viable solutions.
Frankly, and I mean this with no personal disrespect, but from a profesional standpoint; If you say that you are no 'leader' in my book. A true leader is proactive not reactive. A true leader does not compleatly depend on the people under him to tell him whats wrong. A true leader reconizes and addresses the issues he sees without needing people to whack him over the head with them time and time again. It seems to me you want the title but put no effort into such by having others do your job for you.
> There are some valid points being brought up in the community. I think that is great. There is always room for improvement in every situation. However, words without action are nothing more than hot air. Quite frankly, it's been like a furnace around here with all the hot air flying around.
Indeed, so when can we see some action from the 'leaders' of this project rather then long, lenghty posts deflecting critisism and responsibility?
> From my experiences with the Core Team and this community, the best way to get things chaged is as follows...
I have a better idea, have the leaders of this project put their heads togeather, come up with soluations to the issues that have been rasied time and time and time again. Then propose those solutions to the community for input. Go back tot he drawing back with that input, edit what needs to be then lay the ground work for change with the new policies and procedures.
And frankly im tried as well of all this jabbing and nothing gets done.
You need to bring someone new with mgt skills and give that someone ~4 months and the authority to make REAL change (yes that may mean cutting some people and bringing in new blood with fresh ideas and ways of doing things). A change that reaches out to the community, not thinks of them as a after thought. Or ones who keeps repeating the same missteps over and over.
Because you people have used the carrot too much IMO, and now you need to use the stick. A little house cleaning and re-orginization I think is exactly what this project needs IMO.
You wanted specific input there you go.
I could not agree more. Well said.
> For the most part, we have all of the above. We could certainly improve in some areas, but that is the case with all situations.
Thats rose colored glasses on your part. And a prime example of whats is wrong with this project on a mgt level. It seems all the staff here want to focus in and pat each other on the back for all the good points and drag feet or ignore the issues that need to be addressed.
Yes, you ask 'what needs to be improved' and such as this thread shows. However I have yet to see any real improvments and you people keep tripping all over yourself time and time and time again. You seem to have the 8 sec memory of a goldfish. At least thats the impression I am left with accurate or not.
How many times in the past 24 months that I have used XOOPS have the staff taken heat for lack of communication to the community? And yet you just did it AGAIN. Seriously, then you act all perplexed when ppl get upset or act like its a first time offense.
> Personally, I believe Herko is a fine Project manager with very good communication skills. We have a very good team of Team Leaders who are progressing every day in their individual responsibilities as well as their communication skills with their teams and with each other.
Thats great... how about they use some of the skill with the community?
> Where I see the greatest room for improvement is communication with the community and the communities willingness to work with the Core Team.
Less talk more action would be good. Can post all day about these issues, I see no action upon it however.
> There seems to be a lot of complaining going on, but very little action.
Since the dev team is running the show THEY need to identify the issues and start the correction. We as the community cant do much at this point until they acknowledge the issues and reach out to the community. THEY need to take the first step of good will not us. We have done all we can up to this point. We have explained a dozen times over our disatification and given some areas that needs to be addressed. What do you propose else we can do?
Start forking the community?
> From the standpoint of a Team Leader, I find it hard to invest my time with someone when they complain, but offer no viable solutions.
Frankly, and I mean this with no personal disrespect, but from a profesional standpoint; If you say that you are no 'leader' in my book. A true leader is proactive not reactive. A true leader does not compleatly depend on the people under him to tell him whats wrong. A true leader reconizes and addresses the issues he sees without needing people to whack him over the head with them time and time again. It seems to me you want the title but put no effort into such by having others do your job for you.
> There are some valid points being brought up in the community. I think that is great. There is always room for improvement in every situation. However, words without action are nothing more than hot air. Quite frankly, it's been like a furnace around here with all the hot air flying around.
Indeed, so when can we see some action from the 'leaders' of this project rather then long, lenghty posts deflecting critisism and responsibility?
> From my experiences with the Core Team and this community, the best way to get things chaged is as follows...
I have a better idea, have the leaders of this project put their heads togeather, come up with soluations to the issues that have been rasied time and time and time again. Then propose those solutions to the community for input. Go back tot he drawing back with that input, edit what needs to be then lay the ground work for change with the new policies and procedures.
And frankly im tried as well of all this jabbing and nothing gets done.
You need to bring someone new with mgt skills and give that someone ~4 months and the authority to make REAL change (yes that may mean cutting some people and bringing in new blood with fresh ideas and ways of doing things). A change that reaches out to the community, not thinks of them as a after thought. Or ones who keeps repeating the same missteps over and over.
Because you people have used the carrot too much IMO, and now you need to use the stick. A little house cleaning and re-orginization I think is exactly what this project needs IMO.
You wanted specific input there you go.
40
It matters little at this point it seems
Stats is not compatable with 2.2.3, I u/l the folder to the modules die and when I go into modules amin it reports that its missing required install files.
Ill go back to istats (I just wish someone would update istats for the new browsers)
Stats is not compatable with 2.2.3, I u/l the folder to the modules die and when I go into modules amin it reports that its missing required install files.
Ill go back to istats (I just wish someone would update istats for the new browsers)
Login
Search
Recent Posts
Who's Online
Donat-O-Meter
| Stats | |
| Goal: | $100.00 |
| Due Date: | Apr 30 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|