1
bubuche93
Re: Xoops 2.3.2 remote php exploit: is there a patch atm?
  • 2009/1/10 15:11

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


thanks eveyrone



2
bubuche93
Xoops 2.3.2 remote php exploit: is there a patch atm?
  • 2009/1/10 12:09

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


http://www.milw0rm.com/exploits/7705

Is there any patch released? even unofficial?

Thanks !



3
bubuche93
Re: Profile access problem
  • 2009/1/2 16:47

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


its working great now, thank you !

ps: the profile module was not installed, I didn't know you had to install this module to have access to the profiles (i thought it was a module to have an extended profile)



4
bubuche93
Profile access problem
  • 2008/12/31 17:11

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


Hello !

I am using XOOPS 2.3.2b (even if it says 2.3.2 on the admin page... mistake from the team?) and only the admin can access the user profiles.

Its been a while since I have this problem and i thought it was fixed in XOOPS 2.3.0:
"- Fixed profile access bug in case extensible profile module is not installed (phppp/marco)"

Have you encountered the same issue? where do you set the access for the profiles (i can't find it under the group permissions page)

Thanks !



5
bubuche93
Re: emails that should not be used in user profile
  • 2008/9/18 16:47

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


Ok there is something wrong with my XOOPS 2.3 RC3

1)In the "emails that should not be used in user profile" field I entered "test@test.com" (without the "" of course)
2) I tried to register a new account, I had no error message... "confirmation email has been sent to test@test.com"
3)on the registration page, I could not see any captcha.. is it normal? how can I activate the feature in XOOPS 2.3 RC3 ?

Thanks
Franck

IMPORTANT EDIT: i tried to register while i was still loggued as "admin"... after logging out and registering, "test@test.com" was recognized as "invalid email" !!

So it means that the email check is not performed when a user try to register a new user (even if it makes no sense to access register.php when you are already logged in...)

Same for the captcha, it worked when you try to register (and after logging out from your previous user account)



6
bubuche93
Re: emails that should not be used in user profile
  • 2008/9/18 8:14

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


hmm thanks, but I can't find the place to "patch" the code in the new XOOPS 2.3

if (!empty($be) && preg_match("/".$be."/i", $email)) {
$stop .= _US_INVALIDMAIL.'<br />';
break;

in the link above someone said that it was not in register.php anymore but in modules/profile/include/functions.php
... problem, I can't find it. DO you know where it is now?

Thanks !
Franck



7
bubuche93
Re: emails that should not be used in user profile
  • 2008/9/17 17:42

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


all good ! thanks :)

That would be great if we could have the option directly in the admin panel for the 2.3 final instead of using a hack ... drupal even has a regex tester for the email !!



8
bubuche93
Re: emails that should not be used in user profile
  • 2008/9/15 11:53

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


up!



9
bubuche93
Re: emails that should not be used in user profile
  • 2008/9/13 15:25

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


Hello noo-b,

Thank you for your answer !
I already read this post a few months ago when I was using XOOPS 2.0.16 and the hack in the config file using "!" was working great.

However, I am now using 2.2 and the hack doesnt work anymore because I would like to allow 2 (or more) domains.

a regex like "disallow everything but(xxx.com OR yyy.com)" is what I need.

Also if someone could give us more info about XOOPS regex implementation that would be great.

All the best,
Franck



10
bubuche93
emails that should not be used in user profile
  • 2008/9/13 10:24

  • bubuche93

  • Just popping in

  • Posts: 25

  • Since: 2006/11/19


Hello !

I would like to allow a user registration only if his email domain name match @xxx.com or @yyy.com

How can I do this using a regex? I tried several but none of them worked.

Also that would be great if we could have a field to test the regex (I had to go through the registration process each time to test the regex)




TopTop
(1) 2 3 »



Login

Who's Online

222 user(s) are online (136 user(s) are browsing Support Forums)


Members: 0


Guests: 222


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits