Congratulation dolphin team

Good news for who still waiting :

I unstall my dolphine and start a fre installation : (inluded the fix folder here ----->http://www.boonex.com/trac/dolphin/changeset/13117 ) :

1-No possible attack anymore , my article worked without any hassle :)

2-Installing module : No problem too .

I will check the rest later , am exploring lol

Thanks dolphin for this update :)

Good work but am still checking hehe .

Proud Hosted by Zarconia.net
Quote · 30 Oct 2009

now the problem is when one creates a _html Block and put any html code, modifies this example:

This is the code before putting it in the _html Block:

<html>
<body>

<p> Name:
<input name="nombre">
<br> Surname:
<input type = "text" size = "35"
name = "surname"> </ p>

</ body>
</ html>


and this after putting it in the _html Block:


<html>
<body>

<p> Name:
<input type=\"text\" name=\"nombre\">
<br> Surname:
<input type = "text \" size = \ "35 \"
name = \ "names \"> </ p>

</ body>
</ html>



ie the code is useless ... how to fix this!

Quote · 30 Oct 2009

First you don't put the <html> or <body> tag in the code as this can cause confusion with a new opening html tag within an html document.  Your html should only include the acutal html you want to use.

as for the modified code, it looks like the script is auto escaping your "".  There have been many issues with ' and " contained within html codes which caused database errors.  Take out your <html> and <body> and run the block to see if it appears correctly and post back if it doesn't.

Quote · 30 Oct 2009

hello I did what you said .. but the problem persists. I tried other codes but still the same.

Quote · 30 Oct 2009
no one else was to happen?
Quote · 30 Oct 2009

Eli, I am not sure how to get the folder that you said helped fix your problem, I was having the same problem, and I would like to fix it and keep working. So I have to uninstall, start a fresh install and include that folder? How do I get that folder and install it with the script?

any help is great, thanks

Mulch

Quote · 30 Oct 2009

Mulchit, what Eli & this thread is about is as follows:

 

To fix the issue with the HTML block do the following:

 

 

1.  Go to:  http://www.boonex.com/trac/dolphin/changeset/13117 

 

Follow the instructions to upgrade your script, trunk is the equivalent of dolphin root. 

 

If you see it in Red then Delete it, if you see it in green then add it.  It's actually just a simple copy past into the script to show where and what needs to be adjusted.  There's even a nice little color coded Key above all the code that's on that page.

 

2.  Save your files.

 

3.  Your done, now try adding the HTML Block.  This fix was issued by boonex 16 hours ago in response to the issues of inc/security.inc.php that we're occurring.

Quote · 30 Oct 2009

Thank you, after playin around, that is what I started to do, but thank you for the quick reply

Mulch

Quote · 30 Oct 2009

and who helps me solve my problem! I upgraded hoy.pero being equal, this does not happen in dolphin7b7

Quote · 30 Oct 2009

Meeko, follow the instructions in the trac post by Alex and your problem will be fixed.  Of course, that is if you quit using opening <html> & closing </html> tags in the html block. 

Quote · 30 Oct 2009

Well after redoing everything like it showed in trac, I am still getting the possible attack when I try to remove group categories, so I guess that doesn't work

Quote · 30 Oct 2009

did you clear out all the caches in your server?

 

 

Quote · 30 Oct 2009

haha, well that might work, but I am not sure how, so no I didn't lol

Quote · 31 Oct 2009

Login to your admin panel. You will see a box that says Cache. Click the Clear All.

Nothing to see here
Quote · 31 Oct 2009

cleaned all, still have the problem

Quote · 31 Oct 2009
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.