07/09/06 Small Secu...
 
Notifications
Clear all

07/09/06 Small Security Update

3 Posts
2 Users
0 Reactions
3,553 Views
(@tammy)
Posts: 2577
Member Moderator
Topic starter
 

A small patch today to fix a couple small bugs and add a new layer of security on the manage images function.  The list of changes is below.  Because this adds some security, the version number is changing to 2.0.7.

07/09/06 - Manual instructions

- In user.php replace the lost password function.  Moved a couple lines around
and switched a fail message.  Now the password won't be reset unless the e-mail
returns a successful send of the email first.
- In your langauge file add new define for _EMAILFAILED
define ("_EMAILFAILED", "The e-mail failed to be sent.");
- On line 27 of func.reviewform.php change $action to $_GET['action']
- In reviews.php on lines 308 and 315 change $uid to $useruid
- In viewstory.php on line 148 change $story['notes'] to $chapter['notes'] (Thanks to Steve3D)
- In user.php a new check has been added to the manageimages function.
It starts at line 582.  Comments around it to designate start and end.  This check
deals with a bug in IE that allows scripts to be run with fake images.
- In user.php replace line 186 (in the stats function the 3rd line beginning with $authorquery)
- In reviews.php on line 204 change $tpl> to $tpl-> (add hyphen) (Thanks to Eyedam)

Here's the file.


 
Posted : 10/07/2006 12:19 pm
(@guest1448)
Posts: 0
 

Ok, and were's the file?  πŸ™‚


 
Posted : 10/07/2006 3:38 pm
(@tammy)
Posts: 2577
Member Moderator
Topic starter
 

Sorry original post edit to add the file.


 
Posted : 10/07/2006 3:45 pm
Share: