vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   ibProArcade Archive (https://vborg.vbsupport.ru/forumdisplay.php?f=174)
-   -   Error for upgrade. (https://vborg.vbsupport.ru/showthread.php?t=152424)

Ev!L ErN!E 07-18-2007 09:31 PM

wtf??? I have to change server settings just for this???? ohhh come on... there has to be another fix for this.

I mean what are you supposed to do if your host doesn't change anything?

also some concerns:

Quote:

By default, URL File Access is disabled because poorly coded or out of date web scripts can be hijacked using remote http:// URL's in include() or require() commands. If, for example, your script was set to include a page name based on the a URL passed to your script such as:

script.php?page=http://bad-hacker-site.com/page.php

if your script.php was set to include($page) this malicious URL could have your script (due to insecure coding) grab the page.php script from a bad site and run it on your site! That script can delete files, send out spam emails, deface your site, and much more... This is why URL file access is disabled by default.
so if this new version is to stop some security issue.... why does it need to enable a feature that could possibly turn into its own security risk????

ranj 07-19-2007 12:56 AM

I had this prob too guys to solve this prob. you have to edit one file.
edit File: -
/arcade/funtions/functions.php

Find
Code:

$check = getimagesize($member_avatar);
                        $avatarwidth  = $check[0];
                        $avatarheight = $check[1];

And Delete these codes

Find
Code:

<img src='{$member_avatar}' border='0' alt='' width='{$avatarwidth}' height='{$avatarheight}' />
and Change {$avatarheight} with the Height of avater you want same with Width.

Eg.
Code:

<img src='{$member_avatar}' border='0' alt='' width='120' height='120' />
I Hope i didn't made mistake And enjoy.

talenak 07-19-2007 01:24 AM

Thanks for your post Ranj! and I completely agree with everything you said Ev!l Ern!e. I hope MrZeroPage reads and agrees also and adds an option to disable this for the people who can't get their host to change things or are unwilling to enable the function for security purposes themselves.

ranj 07-19-2007 01:49 AM

Thanks talenak

I just did it for my friend and when i posted these codes here

MrZeropage 07-19-2007 02:54 PM

I will look for inserting a check for this function ...

Ev!L ErN!E 07-19-2007 03:43 PM

Quote:

Originally Posted by MrZeropage (Post 1295743)
I will look for inserting a check for this function ...

thank you MrZeropage!

in the meantime do you think the edits Ranj posted are ok to do?

anuanu 07-20-2007 03:04 AM

woot woot!!! now i just need the talkerbot todo the same thing!

loonytune15 07-20-2007 06:51 AM

I installed this on one forum and got the same error. I will await for the check before i install on the next..

Ev!L ErN!E 07-21-2007 06:48 PM

any news on the fix for this?

MrZeropage 07-21-2007 08:17 PM

v2.6.3+ will have a fix and even a global switch for image-resizing

and before anybody asks: after soling last two bugs I will release this v2.6.3+


All times are GMT. The time now is 12:56 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01039 seconds
  • Memory Usage 1,735KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_code_printable
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete