DonXoop wrote:
This explains why the author's own site has been down for a few days.
Jan304 wrote:
I'm suprised of this post by GIJOE. I always tought he was posting on a professional way, but this... Scaring people like hell and advicing to remove in place of fixing it. I hope not for own profit...
Check the post by onokazu:
http://www.xoopscube.jp/modules/news/article.php?storyid=195
You might check the Agenda-X 2.0 beta 2 version, I don't think this version has any security flaw.
http://sourceforge.net/project/showfiles.php?group_id=83736&package_id=99635&release_id=215592
And again, if you goto the post by Onokazu there is a fix listed.
# -FrontPage-
[b][color=FF0000]RewriteEngine on [/color][/b]
IndexIgnore .htaccess */.??* *~ *# */HEADER* */README* */_vti*
RewriteRule ^topic([0-9]+).html$ loadpage.php [L]
RewriteRule ^article([0-9]+).html$ loadpage.php [L]
RewriteRule ^articles.html$ loadpage.php [L]
RewriteRule ^user([0-9]+).html$ loadpage.php [L]
RewriteRule ^submit.html$ loadpage.php [L]
RewriteRule ^archive.html$ loadpage.php [L]
RewriteRule ^sections.html$ loadpage.php [L]
RewriteRule ^partners.html$ loadpage.php [L]
RewriteRule ^$ loadpage.php [L]
<SCRIPT LANGUAGE=javascript>
if (screen.height<=600)
{
document.write('< BODY background="imgages/fdacc800.jpg" leftmargin=0topmargin=0bgproperties=fixed>');
};
if ((screen.height>600)&&(screen.height<=768))
{
document.write('< BODY background="imgages/fdacc1024.jpg" leftmargin=0topmargin=0bgproperties=fixed>');
};
if (screen.height>768)
{
document.write('< BODY background="images/fdacc1280.jpg" leftmargin=0topmargin=0bgproperties=fixed>');
};
</SCRIPT>
shivaji wrote:
Hi:
Thanks a lot, I came to know about this thread from sunrapper! I am still running my site on 2.05 :(. I will keep you posted soon i upgrade my site to 2.06.
carnuke wrote:
Hi reynaldo
I noticed that this is your first post, so welcome to the forums
I just want to say thatnk-you for sharing this important addition to the XOOPS system.
I have not yet installed or tried this hack, but it looks very useable. Ultimately it would be required module wide, or at least the major modules as you have already done. I would personally like to see it working for WFsectins as most of my site is built around this. Maybe you can do this in time?
Thanks again Richard
| Stats | |
| Goal: | $100.00 |
| Due Date: | May 31 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|
