Re: [geeklog-users] Geeklog/Gallery vulnerability

2003-12-09 Thread Jason Signalness
Thanks Tony. Tony Bibbs wrote: Correct, it is only with that plugin. Read this: http://www.geeklog.net/article.php?story=2003120922482655 --Tony Dirk Haun wrote: Jason, This article worries me a bit: http://www.securityfocus.com/guest/24043 [...] The vulerability discussed allowed m

Re: [geeklog-users] Geeklog/Gallery vulnerability

2003-12-09 Thread Tony Bibbs
Correct, it is only with that plugin. Read this: http://www.geeklog.net/article.php?story=2003120922482655 --Tony Dirk Haun wrote: Jason, This article worries me a bit: http://www.securityfocus.com/guest/24043 [...] The vulerability discussed allowed me to write arbitrary data to the s

Re: [geeklog-users] Geeklog/Gallery vulnerability

2003-12-09 Thread Jason Signalness
Dirk Haun wrote: Jason, This article worries me a bit: http://www.securityfocus.com/guest/24043 [...] The vulerability discussed allowed me to write arbitrary data to the server's hard disk, run all kinds of shell commands, and get the output back in my browser. Worrying to be s

Re: [geeklog-users] Geeklog/Gallery vulnerability

2003-12-09 Thread Dirk Haun
Jason, >This article worries me a bit: >http://www.securityfocus.com/guest/24043 [...] >The vulerability discussed allowed me to write arbitrary data to the >server's hard disk, run all kinds of shell commands, and get the output >back in my browser. Worrying to be sure. Hmm, I've only skimmed

Re: [geeklog-users] fix in COM_isemail

2003-12-09 Thread Bob Apthorpe
Hi, On Tue, 9 Dec 2003, Lucas Gonze wrote: > I added '+' character to the list of allowed chars in on the left side > of an email address. This permits email addresses like > [EMAIL PROTECTED], which some people use to flag the source of spam. > > New code: > function COM_isemail( $email ) > { >

[geeklog-users] fix in COM_isemail

2003-12-09 Thread Lucas Gonze
I added '+' character to the list of allowed chars in on the left side of an email address. This permits email addresses like [EMAIL PROTECTED], which some people use to flag the source of spam. New code: function COM_isemail( $email ) { if( eregi( "^([-_0-9a-z+])+([-._0-9a-z+])[EMAIL PRO

Re: [geeklog-users] Installation errors...

2003-12-09 Thread Dirk Haun
Tim, >Parse error: parse error in /home/track/public_html/geeklog/config.php on >line 95 Line 95 in the original config.php is the one where you can set your site's slogan. Do you happen to have a quote sign in there? If so, you need to escape it: $_CONF['site_slogan'] = 'Tim\'s Site'; Or,

Re: [geeklog-users] Installation errors...

2003-12-09 Thread wOOge
On 9-Dec-03, at 10:11 AM, Tim Trachimowicz wrote: I've been havign some problems installing the software. I've checked and double checked the PATH variables, syntax (including 's and ;s) permissions, etc. and still get this error: Parse error: parse error in /home/track/public_html/geeklog/c

[geeklog-users] Installation errors...

2003-12-09 Thread Tim Trachimowicz
I've been havign some problems installing the software. I've checked and double checked the PATH variables, syntax (including 's and ;s) permissions, etc. and still get this error: Parse error: parse error in /home/track/public_html/geeklog/config.php on line 95 Warning: main(databases/.class.ph

Re: [geeklog-users] com_Refresh

2003-12-09 Thread Lucas Gonze
Don't know what the cause is, Walter, but I don't think it's the same thing. The fact that you're not seeing images implies to me that you're using relative URLs for them and the base URL has changed in an unexpected way, but that depends on your local set up. - Lucas On Monday, Dec 8, 2003,