31
tomodea
Dictionary module - Edit and Delete options shown even though the user does not have permission
  • 2008/3/14 5:13

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


I am using version 0.91 of the Dictionary module.

I found that the Edit and Delete options are shown on the item detail page even though the user does not have permission to use these. When the user selects Edit or Delete, permissions are then checked and the user gets the usual "you do not have permission" message. The display of this page then goes into a loop until the user clicks on the Back button on the browser.

In my view, it would be preferable not to tempt the user in the first place.

To resolve this, I have modified detail.php (line 30).

The line is:
$post['admin'] = "[&nbsp;<A HREF='admin/mod-def.php?id=".$post['id']."'>"._EDIT."</A>&nbsp;|&nbsp;<A HREF='admin/del-def.php?id=".$post['id']."'>"._DELETE."</A>&nbsp;]&nbsp;";

I only want this line to be executed if the user has admin rights.

I've simply added this line before:
if ($adminview) {

and this line after:
}

This seems to have done the trick. If the user has admin permissions, then Edit and Delete will be shown but not for users without admin permissions.
Regards, Tom O'Dea
Melbourne, Australia



32
tomodea
Re: extcal Module - How do I get events in progress in the list of upcoming events?
  • 2008/3/14 4:39

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


Quote:

McDonald wrote:
Be carefull with eXtCal.

In dev. version 2.1.6 multiple XSS vulnerabilities have been found. See bug-report.

I asume that previous versions have these probs too.

Make sure you have Protector installed anyway!!


Thanks for the warning. I have XOOPS Protector turned on.
Regards, Tom O'Dea
Melbourne, Australia



33
tomodea
Re: extcal Module - How do I get events in progress in the list of upcoming events?
  • 2008/3/14 4:33

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


Quote:

script_fu wrote:
Very nice find... Have you had any problems from changing the code?


No problems. I just need to remember to retrofit the change if I need to update to a new version of the module at some time in the future.
Regards, Tom O'Dea
Melbourne, Australia



34
tomodea
Re: extcal Module - How do I get events in progress in the list of upcoming events?
  • 2008/3/12 4:29

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


I think I figured it out.

I changed a line in extcal\class\event.php which was:

$criteriaCompo->add(new Criteria('event_start', $time, '>'));

to:

$criteriaCompo->add(new Criteria('event_end', $time, '>'));

This is line 241 in my version.
Regards, Tom O'Dea
Melbourne, Australia



35
tomodea
extcal Module - How do I get events in progress in the list of upcoming events?
  • 2008/3/12 1:04

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


I am using the extcal module and I'm very happy with it.

There is a minor point re the list of upcoming events. This is available as a block which I include in my home page. However, the events in the list are only future events. If I have a long running event, e.g. an exhibition that runs over several days or weeks I would like to see this event in the list. In other words, the list of upcoming events should be those events with an end date in the future rather than a start date in the future.

Does anyone know what changes are needed to do this?
Regards, Tom O'Dea
Melbourne, Australia



36
tomodea
Re: DMS Module - How to change pop-up menus
  • 2008/3/12 0:54

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


I figured out a simple way of addressing this by changing the code from "onmouseover" to "onmousedown". This means the hidden menu will be displayed when the user clicks on the icon.
Regards, Tom O'Dea
Melbourne, Australia



37
tomodea
DMS Module - How to change pop-up menus
  • 2008/3/8 5:22

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


I am using the DMS module (Document Management System) and the users are having some difficulty with the pop-up menu style because it's different from the rest of the XOOPS menus.

The menu items are shown when the user hovers on an icon on the DMS page but the user does not know that he/she needs to do this.

I would therefore like to change the menu style from pop-up menus to regular menus. How do I do this?
Regards, Tom O'Dea
Melbourne, Australia



38
tomodea
Re: Error with Print of an Ad - Catads v 1.40
  • 2008/2/22 4:55

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


Thanks. I did a search but I must have had my search string too specific.
Regards, Tom O'Dea
Melbourne, Australia



39
tomodea
Error with Print of an Ad - Catads v 1.40
  • 2008/2/21 20:06

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


Re: Catads v 1.40
I am using this module and I'm happy with the functions provided.

However, when I try a Print of an Ad I get this error message:

Use of undefined constant _MD_CATADS_CONTACT_MODE0 - assumed '_MD_CATADS_CONTACT_MODE0' in file /modules/catads/print.php line 63

Suggestions, please.
Regards, Tom O'Dea
Melbourne, Australia



40
tomodea
Re: Captcha Module - How do I change the message text
  • 2008/2/21 1:59

  • tomodea

  • Just popping in

  • Posts: 47

  • Since: 2008/2/19


Quote:

trspice wrote:
The file to change is
modules\liaise\language\english\main.php(Line 33): define("_LIAISE_CAPTCHA_DESC","Enter same character string in image.<br />If you dont read string, you can change other string when you click the image.");

The line number may differ for you. When done, refresh the page and it should change. If not then empty your templates_c folder and refresh.


Thanks. That did the trick. I searched for the old string in the module files as they appear after download from the XOOPS repository, i.e. before installation. This string does not appear anywhere in those files. It seems as though the file (main.php) gets modified during installation. The original file has 28 lines, the file that exists in the XOOPS installation has 36 lines. I've now updated the installed version of main.php and the new text now appears. Thanks for the pointer.
Regards, Tom O'Dea
Melbourne, Australia




TopTop
« 1 2 3 (4) 5 »



Login

Who's Online

220 user(s) are online (145 user(s) are browsing Support Forums)


Members: 0


Guests: 220


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits