XOOPS 2.0.5.1 Released! - XOOPS - XOOPS News - XOOPS Web Application System

Re: XOOPS 2.0.5.1 Released!

WarDick Published 11/26/2003 17:10 Just can't stay away Joined 09/13/2003 Comments 890

Update is perfect.

I installed it with twelve visitors on site and they didn't even Know it happened.

Great Job!

Thank You

Re: XOOPS 2.0.5.1 Released!

CBlue Published 11/26/2003 18:06 Updated 11/26/2003 18:08 Joined 06/28/2003 Comments 1244

It will mess up my auto login script if I change out common.php. Is there a way to see the changes on common.php so that I only have to add the security fix part on that one page? I don't mind replacing the other pages.

Re: XOOPS 2.0.5.1 Released!

tl Published 11/26/2003 20:00 Updated 11/26/2003 20:01 Friend of XOOPS Joined 06/23/2002 Comments 999

Quote:

Added fix for preventing users entering infinite loop when recovering a lost password (Onokazu)

Should the version number of losspass.php be 1.8? I think 1.7 or 1.8 has the fix not the 1.6. It was the 1.6 version included in the whole package and no updated file included in the patch. Please confirm. Thanks.

Re: XOOPS 2.0.5.1 Released!

skalpa Published 11/26/2003 20:21 Quite a regular Joined 04/16/2003 Comments 300

Donna, you can see the changes here.
There's a legend at the bottom of the page that indicates what the colours mean.

Skalpa.>

Re: XOOPS 2.0.5.1 Released!

tom Published 11/26/2003 20:55 Updated 11/26/2003 20:56 Friend of XOOPS Joined 09/21/2002 Comments 1359

Excellent work, no probs at all.

I see skalpa has already helped you Donna, but thought I would add, and I've said this in a lot of posts, making core changes although ads a little more, feature wise, is bad, this is a security update, now for modules like IPB and PHP and some hacks, this core change COULD affect any of the core changes made by them mods and hacks, well now they have to wait for the devs of those modules to upgrade too.

this could cause major problems especialy for people that prob struggled even putting the hack in (Ment as general, not pointing).

Any way thats my 2 peneth on making core changes with hacks and mods that affect the core files.

Tim

Re: XOOPS 2.0.5.1 Released!

supernix Published 11/27/2003 0:18 Updated 11/27/2003 7:22 Not too shy to talk Joined 03/13/2003 Comments 151

Here is the autologin portion of the common.php that needs to be uncommented lines 161-184

 //autologin 
    if(empty($HTTP_SESSION_VARS['xoopsUserId']) && isset($HTTP_COOKIE_VARS['autologin_uname']) && isset($HTTP_COOKIE_VARS['autologin_pass'])) { 
        $myts =& MyTextSanitizer::getInstance(); 
        $uname = $myts->stripSlashesGPC($HTTP_COOKIE_VARS['autologin_uname']); 
        $pass = $myts->stripSlashesGPC($HTTP_COOKIE_VARS['autologin_pass']); 
        $myts =& MyTextsanitizer::getInstance(); 
        $user =& $member_handler->loginUserMd5(addslashes($uname), addslashes($pass)); 
        if (false != $user && $user->getVar('level') > 0) { 
            // update time of last login 
            $user->setVar('last_login', time()); 
            if (!$member_handler->insertUser($user, true)) { 
            } 
            $HTTP_SESSION_VARS = array(); 
            $HTTP_SESSION_VARS['xoopsUserId'] = $user->getVar('uid'); 
            $HTTP_SESSION_VARS['xoopsUserGroups'] = $user->getGroups(); 
            // update autologin cookies 
            $expire = time() + $xoopsConfig['session_expire'] * 60 ; 
            setcookie('autologin_uname', $uname, $expire, '/', '', 0); 
            setcookie('autologin_pass', $pass, $expire, '/', '', 0); 
        } else { 
            setcookie('autologin_uname', '', time() - 3600, '/', '', 0); 
            setcookie('autologin_pass', '', time() - 3600, '/', '', 0); 
        } 
    }

Hope this helps. Thanks guys for the updates and the hardwork that you have put into XOOPS [ Please note that I use the hack found here http://wiki.xoops.org/wakka.php?wakka=XoopsAutoLoginHack ] I went and made a compressed file of the common.php file that uses the autologin hack if anyone else using it wants to grab the one that I am using. It is in 7z format and one that is in gzip format : http://www.dnspad.com/common.7z or http://www.dnspad.com/common.gz If you use the 7z and windows then I recommend : http://www.izsoft.dir.bg/izarc.htm

Re: XOOPS 2.0.5.1 Released!

blueangel Published 11/27/2003 7:16 Module Developer Joined 02/20/2002 Comments 132

everything well with the update, as usual

thanks guys

Re: XOOPS 2.0.5.1 Released!

Panos Published 11/27/2003 9:00 Friend of XOOPS Joined 03/20/2003 Comments 87

Perfect as always. I uploaded every file from the 2.0.5.1 release on top of 2.0.5 and all went well... and without a single glitch. Excellent work as always!

Re: XOOPS 2.0.5.1 Released!

french Published 11/27/2003 9:31 Just popping in Joined 10/31/2003 Comments 13

Great job guys!

Re: XOOPS 2.0.5.1 Released!

intel352 Published 11/27/2003 11:58 Updated 11/27/2003 11:59 Module Developer Joined 11/23/2003 Comments 824

goto my site, NukeBBMods.net and get an app called Visual Compare from the downloads section, OR search for it via google to find the official website, excellent app for comparing/combining changes between files

i know they posted a cvs link, but this is good for coding use

btw, please don't mind if the site is a bit slow, dns propagation is taking it's time right now, the site might not be pointing to the new server yet lol

Re: XOOPS 2.0.5.1 Released!

CBlue Published 11/27/2003 15:04 Joined 06/28/2003 Comments 1244

Quote:

Poster: skalpa Posted: 2003/11/26 15:21:43

Donna, you can see the changes here.
There's a legend at the bottom of the page that indicates what the colours mean.

Thanks skalpa!

Re: XOOPS 2.0.5.1 Released!

CBlue Published 11/27/2003 15:08 Joined 06/28/2003 Comments 1244

Thanks to you too, supernix! I didn't want to really try to uncomment because when I did it before, I got lots of errors and then I found the autologin for 2.05 download and that worked great. I will try the uncomment for common.php this time and see if it works for me and if it doesn't then I will try skalpa's suggestion.

My community members want the autologin feature because alot of them have a problem remembering their passwords. So I use the autologin feature for them to make them happy.

Re: XOOPS 2.0.5.1 Released!

CBlue Published 11/27/2003 15:30 Joined 06/28/2003 Comments 1244

Well I messed up again by trying to comment out the auto login on common.php but when I copied and pasted what you wrote, supernix, into common.php, it worked. Thanks for your help! Everything seems to be working great with the 2.05.1 patch and the autologin is working too.

Re: XOOPS 2.0.5.1 Released!

Jan304 Published 11/27/2003 17:59 Official Support Member Joined 03/31/2002 Comments 520

Why is suddenly the XoopsErrorHandler disable by default?

Re: XOOPS 2.0.5.1 Released!

CBlue Published 11/28/2003 3:29 Joined 06/28/2003 Comments 1244

Well, auto login is not staying when you close your browser and then go back to your site again. I'm going to have to replace the common.php with my 2.05 version again to get back my auto login.

Re: XOOPS 2.0.5.1 Released!

GIJOE Published 11/29/2003 7:20 Quite a regular Joined 08/13/2003 Comments 265

line 173 in include/common.php

//$HTTP_SESSION_VARS = array();

This code is for testing or a gabage.
So this // should not be deleted.

However, there might be little harm.
(There is a slight possibility of affecting the theme selection even if some harm exist.)

Re: XOOPS 2.0.5.1 Released!

GIJOE Published 11/29/2003 7:33 Quite a regular Joined 08/13/2003 Comments 265

Quote:

Why is suddenly the XoopsErrorHandler disable by default?

Though I don't know the true reason, I welcome this dicision.
As I've already written in Xoops Japan, XoopsErrorHandler harms 2 points.

1) All of Notice which is controlled not to be displayed by error_reporting() , is displayed.

This cause begginers confusions and not to be able to support easily.

2) It makes diffult to specify the output part of the error.

Re: XOOPS 2.0.5.1 Released!

CBlue Published 11/29/2003 17:13 Joined 06/28/2003 Comments 1244

Quote:

Poster: supernix Posted: 2003/11/26 19:18:03

I went and made a compressed file of the common.php file that uses the autologin hack if anyone else using it wants to grab the one that I am using. It is in 7z format and one that is in gzip format : http://www.dnspad.com/common.7z or http://www.dnspad.com/common.gz If you use the 7z and windows then I recommend : http://www.izsoft.dir.bg/izarc.htm

I downloaded and installed the common.php you had in the gz file above and got an error on line 162. That error was that you had uncommented autologin. So I put the // back in front of the word autogin and the page came back up correctly. So anyone that uses the script you compressed in the gz file need to do that so that they don't get the error in line 162 come up on their site.

Re: XOOPS 2.0.5.1 Released!

frog-man Published 11/30/2003 11:14 Just popping in Joined 08/08/2003 Comments 3

I don't understand.
I've mailed you about some serious security holes. I've made a security patch on my website http://www.phpsecure.info. You had told me that you'll made a 2.0.5.1 secure.
So I came here and I see :
"- Security fix in banners.php (Onokazu)"
you shloud put "frog-m@n".
But that's not the real problem.
The problem is that all security holes have not been fixed, I don't know why you didn't use ALL the files I give you.
It seems that you don't care about the security of XOOPS.
So I've sent 2 or 3 mails a few days ago, and you didn't reply.
Are you dishonnest ? I'm waiting your reply to publish the hole. But I'll don't wait a month !!

bye
frog

Re: XOOPS 2.0.5.1 Released!

Herko Published 11/30/2003 13:27 XOOPS is my life! Joined 02/04/2002 Comments 4238

easy easy now, no need to get angry and assuming a lot. Maybe -I don't know- Hazu has his reasons for not including them. I can assure you that XOOPS is one of the most secure open-source CMS's there are, and that we take security very serious. Kazu is in the process of moving (physically), that may be the reason he hasn't replied to your emails. Just calm down for a moment and think before you post these kinds of rash posts... 2-3 days for an open-source system isn't all that much to ask...
And if Kazu used your fix, then you should get the credits. I haven't compared your fix with the fix in the 2.0.5.1, but it may be that Kazu made another fix (he has got his own ideas on how things should work )

Herko

Re: XOOPS 2.0.5.1 Released!

frog-man Published 11/30/2003 14:48 Updated 11/30/2003 14:51 Just popping in Joined 08/08/2003 Comments 3

I know that XOOPS has a good reputation on security, and that thus you take security serious.
However, there was some security holes in 2.0.5, and there are security holes in 2.0.5.1 again (not big, but a hole is a hole...).

But my real problem is not that. It comes owing to the fact that I did that free and that I'll have liked to be informed to be able to enclose this directory, and to publish an explanation while being sure of an "official" solution.

PS : I'm not angry, I'm impatient to have finished.

Re: XOOPS 2.0.5.1 Released!

marcan Published 11/30/2003 16:05 Just can't stay away Joined 10/08/2003 Comments 824

Just installed 2.0.5.1 and after copying the files to the XOOPS folder, I forgot to delete the Install folder so when I went to my site, I always got redirected to the installation procedure. I then deleted the install folder but when I went again on my site, XOOPS was trying to reach the install page which did not exist anymore so I got a 404.

Finally, I had to restore the install folder and go through the installation process until it says that XOOPS table were already present in the databse. Then I was able to go to my site without a problem and finally delete the install folder.

Is this all normal?

Re: XOOPS 2.0.5.1 Released!

Herko Published 11/30/2003 18:10 XOOPS is my life! Joined 02/04/2002 Comments 4238

then you didn't follow the instructions you uploaded the complete package, and not the patch. You overwrote all files, including the important mainfile.php. There is, of course, a solution. What you need to do is remove the install folder, and edit the mainfile.php to match your site's settings.
That should restore your site to it's previous glory Next time, read the instructions

Herko

Re: XOOPS 2.0.5.1 Released!

marcan Published 11/30/2003 18:49 Just can't stay away Joined 10/08/2003 Comments 824

OUPS !

You are quite right my friend ! I'll remember that for the next time...

Thanks for your patience for us newbie

Re: XOOPS 2.0.5.1 Released!

frog-man Published 12/01/2003 17:26 Just popping in Joined 08/08/2003 Comments 3

Just to say that for me it's ok now.

Re: XOOPS 2.0.5.1 Released!

Kilowoo Published 12/07/2003 4:07 Updated 12/07/2003 4:11 Just popping in Joined 11/09/2003 Comments 6

After installing this new patch I have problems with the newbb forum..
While I'm logged I can't read the posts at the forum.. (only the titles) It appears a blank page in the center (where it should be the forum module)..

While if I'm using Anonimous user I can enter and make the reply..
My users are all posting with the anonymous user cause of this problem

What could be the problem?
I haven't it before the patch.. and I don't make any other changes..

I read somewhere that someone says it was making infinite loops.. but I don't know

I'm using XOOPS 2.0.5.1 and defaul theme

Thanks in advance..

Kilowoo

Re: XOOPS 2.0.5.1 Released!

scsween Published 01/03/2004 3:42 Updated 01/03/2004 3:43 Just popping in Joined 04/17/2003 Comments 11

I upgraded from 2.0.5 to 2.0.5.1 by overwriting the files.

The following is written to the top of each page:

eturn xoops_language_trim($text); } return trim($text); } ?>mid')); } } } ?>

And the home page is completely blank w/ the exception of the text.

Same w/ default template and theme.

Ideas? I'm stuck.

Re: XOOPS 2.0.5.1 Released!

DobePhat Published 01/03/2004 6:20 Friend of XOOPS Joined 04/15/2003 Comments 656

I had a similar problem with the 2.5 upgrade and had to roll back a file or two...so now Im certain I would run into similar problems.

Anyways if it helps at all...
Try running PHP debug...
Look for a FATAL Error....
thereing lies the "root" of the problem..

(oh if it only were actually that simple eh? )

Try it....
If you can't get to admin try typing the address directly...

Stats
Goal:	$100.00
Due Date:	Nov 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

XOOPS: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Re: XOOPS 2.0.5.1 Released!

Login

Search

Recent Comments

Re: New Admin Theme for XOOPS (Beta)

Sanford Pharmacy: Exceptional Pharmacy Services Tailored to You

Re: New Admin Theme for XOOPS (Beta)

Re: XOOPS 2.5.12 Beta-2 available for Testing

Re: XOOPS 2.5.12 Beta-2 available for Testing

Who's Online

Donat-O-Meter

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}

Archives

News archives