Support Forums - All Posts - XOOPS Web Application System

31

Xoops Input Validation Flaw in 'newbb' Module Permits Cross-Site Scripting Attacks

2004/4/13 0:01
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

SecurityTracker.com Archives - XOOPS Input Validation Flaw in 'newbb' Module Permits Cross-Site Scripting Attacks

Does this affect newbb pro too? Or is this fixed already?

There's a fix by GIJoe of PEAK XOOPS here. Is it safe to apply it in my installation?

32

ms weather notices

2004/4/12 23:11
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

what are they? i turned on PHP debugging and got the following:

Quote:

Notice: Constant _MSW_TODAY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 21 Notice: Constant _MSW_FORECAST already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 22 Notice: Constant _MSW_EXTENDED already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 23 Notice: Constant _MSW_HIGH already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 24 Notice: Constant _MSW_LOW already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 25 Notice: Constant _MSW_CURRENTLY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 26 Notice: Constant _MSW_TOMORROW already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 27 Notice: Constant _MSW_SUN already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 28 Notice: Constant _MSW_MON already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 29 Notice: Constant _MSW_TUE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 30 Notice: Constant _MSW_WED already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 31 Notice: Constant _MSW_THU already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 32 Notice: Constant _MSW_FRI already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 33 Notice: Constant _MSW_SAT already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 34 Notice: Constant _MSW_DAY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 35 Notice: Constant _MSW_MORECURRENT already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 36 Notice: Constant _MSW_FEELSLIKE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 37 Notice: Constant _MSW_BAROMETER already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 38 Notice: Constant _MSW_HUMIDITY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 39 Notice: Constant _MSW_VISIBILITY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 40 Notice: Constant _MSW_DEWPOINT already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 41 Notice: Constant _MSW_SUNRISE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 42 Notice: Constant _MSW_SUNSET already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 43 Notice: Constant _MSW_UNAVAILABLE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 44 Notice: Constant _MSW_UNLIMITED already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 45 Notice: Constant _MSW_WIND already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 46 Notice: Constant _MSW_AM already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 47 Notice: Constant _MSW_PM already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 48 Notice: Constant _MSW_FEW already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 49 Notice: Constant _MSW_INTHE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 50 Notice: Constant _MSW_RAIN already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 51 Notice: Constant _MSW_CLEAR already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 52 Notice: Constant _MSW_SUNNY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 53 Notice: Constant _MSW_FAIR already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 54 Notice: Constant _MSW_MOSTLY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 55 Notice: Constant _MSW_LIGHT already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 56 Notice: Constant _MSW_HEAVY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 57 Notice: Constant _MSW_SHOWERS already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 58 Notice: Constant _MSW_SHOWER already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 59 Notice: Constant _MSW_PARTLY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 60 Notice: Constant _MSW_CLOUDY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 61 Notice: Constant _MSW_HAZE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 62 Notice: Constant _MSW_DRIZZLE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 63 Notice: Constant _MSW_WITH already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 64 Notice: Constant _MSW_THUNDER already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 65 Notice: Constant _MSW_THUNDERSTORMS already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 66 Notice: Constant _MSW_SCATTERED already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 67 Notice: Constant _MSW_ISOLATED already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 68 Notice: Constant _MSW_SNOW already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 69 Notice: Constant _MSW_VICINITY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 70 Notice: Constant _MSW_CLOUDS already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 71 Notice: Constant _MSW_EARLY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 72 Notice: Constant _MSW_FOG already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 73 Notice: Constant _MSW_CLEARING already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 74 Notice: Constant _MSW_LATE already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 75 Notice: Constant _MSW_DRIFTING already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 76 Notice: Constant _MSW_SELECTCITY already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 77 Notice: Constant _MSW_OPENERROR already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 79 Notice: Constant _MSW_WRITEERROR already defined in /home/z/public_html/ismash/modules/ms_weather/language/english/main.php on line 80 Notice: Undefined index: content in /home/z/public_html/ismash/modules/ms_weather/blocks/block-MS-Weather.php on line 36

33

error - random terms block not shown

2004/4/12 6:32
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

i turned on php debug and i got:
Quote:

Parse error: parse error, expecting `T_PAAMAYIM_NEKUDOTAYIM' or `'('' in /home/zeus/public_html/ismash/modules/wordbook/blocks/random_term.php on line 14

34

Re:

2004/4/12 3:31
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

Carnuke reported the same problem ahead of me. look at this carnuke's page (which I picked from the wordbook v0.99 news thread)

Please take note of the "Meridional Rays" entry where you'll see the html code "<a href="ht..." near the end of the entry.

Or "Snell's Law" where the text formatting "<i>n</i> to a lower <i>n</i> w..." can be seen.

Thanks for the quick response.

Hmm ... I deactivated the wordbook module when I reported about my problem with themes. Now that's it's on again, I can't find the random term block though I've set it to visible already.

35

feature request - illustrations

2004/4/12 2:01
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

how about adding images for illustration purposes?

36

why "wordbook" instead of the name i give to my module?

2004/4/12 1:50
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

I'm wondering as to why it wordbook doesn't follow the usual convention of displaying the name I give to a module instead of displaying "wordbook".

(ie when i go the the wordbook module as a user i can see:
"Browse by Category > Wordbook > F"

where I would rather have the name ("Dictionary" in my case) instead:
"Browse by Category > Dictionary > F"

(I know I can just edit the template, but I just want to provide a feedback on this.

)

37

links not displayed right when browsing entries

2004/4/12 1:39
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

On my site, there are entries that have links in them. (ie synonyms of the word). When browsing these terms, I don't see them as links but as text:


See <a href="http://mysite/modules/wordbook/entry.php?entryID=4" target="_blank">entry</a>...

when i edit entries with links, i get the html tag "A href..." tags instead of the URL BB tag.

(hmm ... did i explain myself right there?)

38

Re: wordbook v0.99 - blank page after a change of theme

2004/4/11 10:23
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

that's it. it's working now. thanks.

by the way, I would also like to report that for a while , I wasn't able see the module button from the admin page. i have to go to system admin>modules and get the admin page from there.

everything's working fine now. could it be cache related?

39

wordbook v0.99 - comments, reports, feedback

2004/4/11 4:38
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

I installed wordbook v0.99, and thereafter decided to change my theme. when i viewed my site, i got a blank page. i turned on debugging and got:
Quote:

Fatal error: Call to a member function on a non-object in /home/z/public_html/mysite/modules/wordbook/blocks/random_term.php on line 64

what gives?

40

how about jabber?

2004/4/8 0:01
GOwin
Just popping in
Posts: 78
Since: 2003/5/2 9

good idea! but i really prefer jabber over the other IMs.

can't we add a new field for jabber? please?

Stats
Goal:	$100.00
Due Date:	Apr 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Forum Index

Xoops Input Validation Flaw in 'newbb' Module Permits Cross-Site Scripting Attacks

ms weather notices

error - random terms block not shown

Re:

feature request - illustrations

why "wordbook" instead of the name i give to my module?

links not displayed right when browsing entries

Re: wordbook v0.99 - blank page after a change of theme

wordbook v0.99 - comments, reports, feedback

how about jabber?

Login

Search

Recent Posts

Re: Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Rebuilding and Updating a 20 years old Xoops Website from 2.0.18? to 2.5.11

Re: NewBB v 5.1.0 b 6

Re: NewBB v 5.1.0 b 6

NewBB v 5.1.0 b 6

Re: XOOPS 2.5.11 search user is not working

Re: oledrion

Re: oledrion

Re: oledrion

Re: oledrion

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}