Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - kai

Pages: 1 2 3 4 5 [6] 7 8 9 10 ... 48
76
Mods & Plugins (Releases & Support) / Re: [PROGRAM] 4images Mobile Server v1.2 [4images 1.7.10]
« on: May 05, 2011, 11:40:24 AM »
Thank you ivan!

77
Discussion & Troubleshooting / Re: Malware notification von Google
« on: May 02, 2011, 07:34:29 PM »
Du verwendest eine sehr alte Version 1.7.4.

Stelle sicher dass Du alle Security fixes installierst hast:
http://www.4homepages.de/forum/index.php?board=17.0

Oder installiere direkt die aktuelle Version 1.7.10:
http://www.4homepages.de/forum/index.php?topic=29541.0

78
News & Announcements / Re: 4images 1.7.10
« on: May 01, 2011, 11:22:15 PM »
=========================================================
ChangeLog Version 1.7.10
=========================================================
- [1.7 - 1.7.9] Security fix for Multiple Path disclousure (http://www.4homepages.de/forum/index.php?topic=29470.0)
- [1.7 - 1.7.9] Security fix for sql injection in admin/categories.php (http://www.4homepages.de/forum/index.php?topic=29469.0)
- [1.7 - 1.7.9] Security fix for path disclosure in paging.php (http://www.4homepages.de/forum/index.php?topic=28481.0)
- [1.7 - 1.7.9] Security fix for input validation error (http://www.4homepages.de/forum/index.php?topic=29504.0)
- [1.7.7 - 1.7.9] Fixed {categories},{details},{index},{lightbox},etc tags don't work (http://www.4homepages.de/forum/index.php?topic=28321.0)
- [1.7.9] Fixed DB Error: Bad SQL Query: INSERT INTO 4images_wordmatch (image_id, ... (http://www.4homepages.de/forum/index.php?topic=28430.0)
- Improved password encryption using salted hashes (new file includes/security_utils.php)
- New Version of Rebuild Search Index Plugin (http://www.4homepages.de/forum/index.php?topic=6718.0)
- Added settings to define type of indexing of fields (fulltext, keywords, phrase)
- Fixed search in additional fields
- Fixed wrong width in error.html template
- Fixed issue calculating ExposureTime in EXIF data
- Fixed orphan search words are not deleted correctly if multiple image ids are passed to remove_searchwords()
- Minor fixes in text fixes in lang/deutsch/admin.php
- Changed default settings for CAPTCHA


Neue Dateien / New Files:
---------------------------------------
admin/plugins/rebuild_searchindex.php
includes/security_utils.php


Geänderte Dateien / Changed Files:
---------------------------------------
global.php
download.php
install.php
lightbox.php
member.php
register.php
search.php
admin/categories.php
admin/checkimages.php
admin/images.php
admin/thumbnailer.php
admin/users.php
admin/validateimages.php
includes/constants.php
includes/csrf_utils.php
includes/functions.php
includes/page_header.php
includes/paging.php
includes/session.php


Sprache / Language:
---------------------------------------
admin.php

79
Feedback & Suggestions / 4images 1.7.10 - Feedback
« on: May 01, 2011, 11:20:12 PM »
Bitte nutzt diesen Thread für Feedback, Kommentare und Anregungen zum 4images 1.7.10 Release.
Für Bug Reports und Troubleshooting bitte dieses Forum nutzen.

Please use this thread for feedback and comments about the 4images 1.7.10 release.
For bug reporting and troubleshooting please use this forum.

80
News & Announcements / 4images 1.7.10
« on: May 01, 2011, 11:12:19 PM »
:flag-de: Die neue Version 4images 1.7.10 wurde veröffentlicht. Das Release bringt neue Funktionen, Detailverbesserungen, behebt bugs und sicherheitsrelevante Fehler.
Wir empfehlen allen Nutzern ein Update auf die aktuelle Version. Alle Änderungen und Features sind in der Datei "docs/Changelog.txt" aufgelistet.

:flag-en: The new version 4images 1.7.10 has been released. This release comes with some improvements, bugfixes, security fixes and minor changes.
We recommend all users to update to the current version. All changes and features are listed in "docs/Changelog.txt".

Download:
http://www.4homepages.de/4images/download.php

Demo:
http://www.4homepages.de/4images/demo.php

Für Feedback zur 4images 1.7.10 Version bitte diesen Thread nutzen.

Please use this thread for feedback about the 4images 1.7.10 version.

81
Bug Fixes & Patches / [1.7 - 1.7.9] Security fix for input validation error
« on: April 19, 2011, 10:09:58 AM »
A input validation error vulnerability in 4images 1.7 - 1.7.9 has been found.

To fix this:

in download.php

find

$file = array();

and replace with

$file = array();
$file_path = null;
$file_name = null;

and find

while ($image_row = $site_db->fetch_array($result)) {

and replace with

while ($image_row = $site_db->fetch_array($result)) {
$file_path = null;
$file_name = null;

82
Bug Fixes & Patches / [1.7 - 1.7.9] Security fix for Multiple Path disclousure
« on: April 11, 2011, 10:47:42 AM »
A multiple path disclousure vulnerability in 4images 1.7 - 1.7.9 has been found.

To fix this:

In global.php

find


$action = (isset($HTTP_POST_VARS['action'])) ?
stripslashes(trim($HTTP_POST_VARS['action'])) :
stripslashes(trim($HTTP_GET_VARS['action']));


and replace with


$action = (isset($HTTP_POST_VARS['action'])) ? 
stripslashes(trim((string)$HTTP_POST_VARS['action'])) : 
stripslashes(trim((string)$HTTP_GET_VARS['action']));


find


$mode = (isset($HTTP_POST_VARS['mode'])) ? 
stripslashes(trim($HTTP_POST_VARS['mode'])) : 
stripslashes(trim($HTTP_GET_VARS['mode']));


and replace with


$mode = (isset($HTTP_POST_VARS['mode'])) ? 
stripslashes(trim((string)$HTTP_POST_VARS['mode'])) : 
stripslashes(trim((string)$HTTP_GET_VARS['mode']));


find


$search_keywords = (isset($HTTP_POST_VARS['search_keywords'])) ? 
trim($HTTP_POST_VARS['search_keywords']) : trim($HTTP_GET_VARS['search_keywords']);


and replace with


$search_keywords = (isset($HTTP_POST_VARS['search_keywords'])) ?
trim((string)$HTTP_POST_VARS['search_keywords']) :
trim((string)$HTTP_GET_VARS['search_keywords']);


find


$search_user = (isset($HTTP_POST_VARS['search_user'])) ?
trim($HTTP_POST_VARS['search_user']) : trim($HTTP_GET_VARS['search_user']);


and replace with


$search_user = (isset($HTTP_POST_VARS['search_user'])) ?
trim((string)$HTTP_POST_VARS['search_user']) :
trim((string)$HTTP_GET_VARS['search_user']);


and in includes/page_header.php

find

$cookie_rated = isset($HTTP_COOKIE_VARS[$cookie_name.'rated']) ?
unserialize(stripslashes($HTTP_COOKIE_VARS[$cookie_name.'rated'])) : array();

and replace with

$cookie_rated = isset($HTTP_COOKIE_VARS[$cookie_name.'rated']) ? explode(" ",
stripslashes((string)$HTTP_COOKIE_VARS[$cookie_name.'rated'])) : array();

find

setcookie($cookie_name.'rated', serialize($cookie_rated), $cookie_expire,
COOKIE_PATH, COOKIE_DOMAIN, COOKIE_SECURE);

and replace with

setcookie($cookie_name.'rated', implode(" ", $cookie_rated), $cookie_expire,
COOKIE_PATH, COOKIE_DOMAIN, COOKIE_SECURE);

83
Bug Fixes & Patches / [1.7 - 1.7.9] Security fix for sql injection in admin/categories.php
« on: April 11, 2011, 10:23:17 AM »
A possible sql injection vulnerability in 4images 1.7 - 1.7.9 has been found.
With this logged in admin users could alter queries to the application SQL database.

To fix this:

In admin/categories.php

find 2 x

  $auth_viewcat = $HTTP_POST_VARS['auth_viewcat'];
  $auth_viewimage = $HTTP_POST_VARS['auth_viewimage'];
  $auth_download = $HTTP_POST_VARS['auth_download'];
  $auth_upload = $HTTP_POST_VARS['auth_upload'];
  $auth_directupload = $HTTP_POST_VARS['auth_directupload'];
  $auth_vote = $HTTP_POST_VARS['auth_vote'];
  $auth_sendpostcard = $HTTP_POST_VARS['auth_sendpostcard'];
  $auth_readcomment = $HTTP_POST_VARS['auth_readcomment'];
  $auth_postcomment = $HTTP_POST_VARS['auth_postcomment'];

and replace with

  $auth_viewcat = intval($HTTP_POST_VARS['auth_viewcat']);
  $auth_viewimage = intval($HTTP_POST_VARS['auth_viewimage']);
  $auth_download = intval($HTTP_POST_VARS['auth_download']);
  $auth_upload = intval($HTTP_POST_VARS['auth_upload']);
  $auth_directupload = intval($HTTP_POST_VARS['auth_directupload']);
  $auth_vote = intval($HTTP_POST_VARS['auth_vote']);
  $auth_sendpostcard = intval($HTTP_POST_VARS['auth_sendpostcard']);
  $auth_readcomment = intval($HTTP_POST_VARS['auth_readcomment']);
  $auth_postcomment = intval($HTTP_POST_VARS['auth_postcomment']);

84
Chit Chat / Re: http://www.4homepages.de/version/version.php
« on: March 25, 2011, 05:54:49 PM »
Das siehst du wenn Du drauf klickst. Da steht der Text mit Link drin.

85
Language Packs / Re: [Language] Catalan / Traducció al Català 4images 1.7.9
« on: March 24, 2011, 06:18:14 PM »
Gracias!

86
Mods & Plugins (Requests & Discussions) / Re: Twitter plugin
« on: March 24, 2011, 04:06:21 PM »
have a look here:

http://twitter.com/about/resources/tweetbutton
http://dev.twitter.com/pages/tweet_button

87
News & Announcements / Re: New "Sites in Action"
« on: February 09, 2011, 06:44:27 PM »
Don't forget to check the 4images "sites in action" section.

Enjoy these great 4images sites: http://www.4homepages.de/resources/
Top sites here: http://www.4homepages.de/resources/Ratings/

88
Bug Fixes & Patches / Re: [1.7.9] Fix for search
« on: January 06, 2011, 12:12:33 AM »
@comicart: the pictures on your site don't have any keywords. that's why ;)

89
Bug Fixes & Patches / [1.7.9] Fix for search
« on: January 05, 2011, 11:25:59 AM »
In 4images 1.7.9 the search with more than one keyword, the use of operators (AND OR NOT) and two-word-keywords like "red car" is not working properly.
To fix this please apply this patch to the 3 files:

/includes/functions.php
/search.php
/includes/search_utils.php

The patched files are attached to this post (see below).
The fix will also be included in the next release of 4images.

Tip: If you want to search for a two-word-keyword like "red car", then you have to enter the ".



1.) search in /includes/functions.php:


foreach ($split_keywords as $key => $val) {
$keywords .= (($keywords != "" ) ? ", " : "")."<a href=\"".$site_sess->url(ROOT_PATH."search.php?search_keywords=".urlencode($val))."\">".format_text($val, 2)."</a>";

and replace with:

    foreach ($split_keywords as $key => $val) {
      $url_val = $val;
      if (strpos($url_val, ' ') !== false) {
        $url_val = '"' . $url_val . '"';
      }
      $keywords .= (($keywords != "" ) ? ", " : "")."<a href=\"".$site_sess->url(ROOT_PATH."search.php?search_keywords=".urlencode($url_val))."\">".format_text($val, 2)."</a>";



2.) search in /search.php:


$split_words = prepare_searchwords($search_keywords, true);

and replace with:

$split_words = prepare_searchwords_for_search($search_keywords);



3.) in /includes/search_utils.php:

search for

function prepare_searchwords($val, $for_search = false)

insert above:

function prepare_searchwords_for_search($val)
{
$val = strip_tags(trim(stripslashes($val)));
$val = convert_special($val);
$val = strtolower($val);
$val = str_replace(array('+', '-'), array(' and ', ' not '), $val);
$val = preg_replace('/\s+/', ' ', $val);
$tokens = array();
for ($nextToken = strtok($val, ' '); $nextToken !== false; $nextToken = strtok(' ')) {
if ($nextToken[0] == '"') {
$nextToken = $nextToken[strlen($nextToken)-1] == '"' ? substr($nextToken, 1, -1) : substr($nextToken, 1) . ' ' . strtok('"');
}
$tokens[] = $nextToken;
}
return $tokens;
}


search for
"#[\n\t\r^\$\(\)<>\"\|@\?%~\+\.\[\]{}:\/=!§\\\\]+#s"

and replace with
"#[\n\t\r^\$\(\)<>\"\|,@\?%~\+\.\[\]{}:\/=!§\\\\]+#s"


3.1) search:

function prepare_searchwords($val, $for_search = false)
{

insert below:

  // Backwards compatibility
  if ($for_search) {
      return prepare_searchwords_for_search($val);
  }


3.2) search:

    if ($for_search) {
      $search_array = array(
        "/\s+\+/",
        "/\s+\-/"
      );

      $replace_array = array(
        " and ",
        " not "
      );

      $val = preg_replace($search_array, $replace_array, $val);
    } else {
      $val = str_replace("*", "", $val);
    }

and replace with:

    $val = str_replace("*", "", $val);


3.3) search:

      array_walk($split_words, 'trim_value');

and replace with:

      $split_words = array_map('trim', $split_words);
      $split_words = array_map('strip_tags', $split_words);
      $split_words = array_map('convert_special', $split_words);
      $split_words = array_map('strtolower', $split_words);


3.4) search:

    if ($for_search && ($word == "and" || $word == "und" || $word == "or" || $word == "oder" || $word == "not")) {
      $clean_words[] = $word;

and replace with:

    if ($word == "and" || $word == "und" || $word == "or" || $word == "oder" || $word == "not") {


3.5) search and remove:

  }

  if ($for_search) {
    // Add whole string for image_keyword search
    $clean_words[] = implode(' ', $clean_words);


90
Templates & Styles (Releases & Support) / Re: [Style] New RSS FEED Style
« on: December 31, 2010, 01:57:48 PM »
Super!

Und alle 3 Feeds valide nach W3C:
http://validator.w3.org/feed/check.cgi?url=http%3A%2F%2Fwww.demo.vienna-pictures.com%2Frss.php%3Faction%3Dimages


Pages: 1 2 3 4 5 [6] 7 8 9 10 ... 48