No, the user is not in the admin group ( I'm not so stupid ), but recently I've have enabled the cache on news module and a user tell me about this problem (public IP), now I'm trying to disable the caching on modules.

Yes, on this site I can't see the posts'IP but on mine a unprivileged user can, and to complicate all don't ever.

For newbb module you are in truth (sorry ) but for comments to the news I can view the IP address if I'm logged in like privileged user or normal user.

In my opinions is not good that something can obtain tha ip address of an user that post a comment, or a message in the forum area, something know how I can disable this features? There are an option to change or some code to modify?

thanks

No, there are any type of control on extensions, but is only an idea of hack.

I only start to work this but seems, in another thread, that something is hacking the official downloads module and I'm waiting this also beacause in this period I have not much time.

I have the gzip compression on, I have contacted some people that have problems and wait for anwser but set off the compression have solved a problem on comments administration page so I think that the problems are solved, I hope

In any case seem a very strange bug.

The page is blank, or with only the fixed part of page (title, menu and other blocks)

Hello, I have a strange problem in my XOOPS site,
www.gattonerong.it, some people report problem at the end of register form.

In one case norton firewall seem the guilty but other cases are not clear.

some idea?

My little changes now this:

in mydownloads_submit.html I have changed the definition of form adding

enctype="multipart/form-data

and a line in html table after url entry:

<tr><td class="head">
<b>File locale:</b></td>
<td class="odd">
<input type="file" name="fileutente" />
</td>
</tr>
<tr>

after in file submit.php in mydownload module directory I have modified

// Check if URL exist
if (($HTTP_POST_VARS["url"]) || ($HTTP_POST_VARS["url"]!="")) {
$url = $HTTP_POST_VARS["url"];
}

in:

// Check if URL exist
if (($HTTP_POST_VARS["url"]) || ($HTTP_POST_VARS["url"]!="")) {
$url = $HTTP_POST_VARS["url"];
}
if (!empty($_FILES['fileutente'])) {
$file_name = basename($_FILES['fileutente']['tmp_name']);
$file_info = pathinfo($_FILES['fileutente']['name']);
# add extension
if ($file_info['extension']) {
$file_name = $file_name.".".$file_info['extension'];
}
# compose url path
$url = XOOPS_URL."/modules/mydownloads/uploads/".$file_name;

if (move_uploaded_file($_FILES['fileutente']['tmp_name'],"uploads/".$file_name)) {
$debug_txt = "File uploaded";
}
else {
$debug_txt = "Error while upload file:<br/>".$_FILES['fileutente']['error'];
}
}

This method admit that users can add simple a link or, in case that gives you a file, upload a file in a directory.

I am trying to work on automatic deletion of not approved file. Also I'm not sure that the uploaded file don't write over another file but now work

I'm trying a little hacks:

add to the submit template the html code at the end

<form enctype="multipart/form-data" method="post" action="submit.php">
<input type="hidden" name="MAX_FILE_SIZE" value="5000000" />
Carica il file:
<input type="file" name="fileutente" />
<input type="submit" />
</form>

then in submit.php:

# line 41
$file_url = "http://";
if (!empty($_FILES['fileutente'])) {
$file_name = basename($_FILES['fileutente']['tmp_name']);
$file_info = pathinfo($_FILES['fileutente']['name']);
# add extension
if ($file_info['extension']) {
$file_name = $file_name.".".$file_info['extension'];
}
# compose url path
$file_url = XOOPS_URL."/modules/mydownloads/updates/".$file_name;

if (move_uploaded_file($_FILES['fileutente']['tmp_name'],"uploads/".$file_name)) {
$debug_txt = "File uploaded";
}
else {
$debug_txt = "Error while upload file:<br/>".$_FILES['fileutente']['error'];
}
}

The template have also another variable with the new name of uploaded file.

What you think?