Sheepcontrol
@sheepcontrol
Reputable Member
Joined: Jan 4, 2017
Last seen: Oct 13, 2020
Topics: 50 / Replies: 282
Reply
Re: Status report

Actually, handling the 2 different storage engines proved easier than I expected.It will be as "Web 2.0" as it has to be, but I still am try...

11 years ago
Forum
Reply
Re: [Post-Hotfix] When adding new stories, Characters/Genre/Warnings are None

Well, then the error is technically impossible, since I rolled back so far, all that's left is a change to viewseries.phpThe changes to the mysql...

11 years ago
Reply
Re: [Post-Hotfix] When adding new stories, Characters/Genre/Warnings are None

Well, since the entire hotfix path was way off the optimal, just to make sure, that you have only the changes to the viewseries.php and both the mysql...

11 years ago
Reply
Re: Reason for Deletion

Sure, why not, optional on all ends though.You know you are giving me a heck of additional work ?

11 years ago
Reply
Re: Anti Spam Controls

I guess that kind of falls together with the other anti-spam/moderation issue, surely a trusted member's account could also be compromised - anyb...

11 years ago
Reply
Re: Deleted Story Hold

Sounds good, I think I even have it so that a story gets a deleted flag (using the validated field) upon deletion, and with the story being flagged aw...

11 years ago
Reply
Re: Comment & Review Moderation

Wit the new registration system, most spam bots should be kept from registering in the first place.On top, how about the option to have new members un...

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

Can I get a post of Step 3 so I can back out the changes?-- JbEDIT: Nevermind.  I found it and edited it out.So it'd good now?

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

Thank you, Robert for pointing this out, and thank you, Sheepcontrol for working on the fix. I wanted to point out that the 2 lines of code that were ...

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

A quick search didn't find those lines of code in the files. There was similar code but not the same.Please hurry up on the fixed version as at l...

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

Series doesnt show whit$seriesid = (isset($_GET['seriesid']) && is_numeric($_GET['seriesid'])) ? escapestring($_...

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

Thanks for the feedback, good to know.

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

I did this change but now when I click submit button everything is OK but when I want to echo inserted text, it shows between the lines "rn"...

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

I couldn't find that code in includes/mysqli_functions.php but could in includes/mysql_functions.php, so was assuming there's a tiny typo in...

11 years ago
Reply
Re: SQL Injection vulnerability in eFiction

Ran a test, because $seriesid is straight forward used to build links, it still shows up as injected, but the actual DB query is safe.

11 years ago
Page 16 / 23