Welcome to Geeklog, Anonymous Saturday, December 28 2024 @ 10:03 pm EST

News

Fix your Shoutbox!

  • Sunday, September 28 2003 @ 04:45 am EDT
  • Contributed by:
  • Views: 17,049
Security

As you may have seen, someone messed up the layout of the site yesterday by posting some HTML in the shoutbox. The shoutbox code doesn't filter HTML at all which is, of course, a glaring omission.

So if you have the shoutbox installed on your site, you should fix it by adding a call to strip_tags in the following two lines:

$shout_name = COM_checkWords (strip_tags ($HTTP_POST_VARS["shout_name"]));
$shout_message = COM_checkWords (strip_tags ($HTTP_POST_VARS["shout_message"]));

The shoutbox code linked from the original announcement of the shoutbox has been fixed accordingly.

bye, Dirk

Geeklog 1.3.8-1 bugfix release

  • Saturday, August 09 2003 @ 03:15 pm EDT
  • Contributed by:
  • Views: 10,830
Announcements Geeklog 1.3.8-1 is a bugfix release over 1.3.8 that addresses a variety of (mostly minor) bugs (no security issues), e.g. in the search and the installation script.

Geeklog 1.3.8-1 is available as an upgrade archive as well as a full tarball.

Please note that only the full tarball includes the updated install script, so if you're planning a fresh install, you should download that file.

[Update 2003-08-10 - The upgrade archive accidentally included the original files from the 1.3.8 release, not the 1.3.8-1 versions. Sorry about that. Please download that tarball again. The full tarball was not affected.]

Aeonserv is Released!

  • Wednesday, July 30 2003 @ 05:21 pm EDT
  • Contributed by:
  • Views: 9,354
Announcements Aeonserv incorporates Geeklog 1.3.8 into its core and makes deployment on the NT/2000/XP operating systems simpler than imaginable.

It sports the newest !White Pointer theme and is a truly incredible package.

You can find out more about Aeonserv at http://aeonserv.sourceforge.net

You can download it at
http://aeonserv.com

Page navigation