vb.org Archive
Page 24 of 30 « First 142223 24 2526 Last »
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)
-   -   vBug Tracker Lite 3.5.1 (https://vborg.vbsupport.ru/showthread.php?t=96888)

Dark_Wizard 06-26-2006 10:19 AM
Quote:
Originally Posted by Todi
WTF? What is going on? How serious is this security flaw? Should everyone uninstall the mod? Why is there no information about this except a little notice at the top? I really don't like the sound of this... And since the coder has been MIA for so long, i find it unlikely that any fixes will be coming either. Please give us more information..
I have been notified and it is being worked on...will be out this week with a new update...

Dark_Wizard 06-26-2006 12:06 PM
Issue has been resolved, waiting on a reply to my PM. Also additional bugs have been fixed and included in the update.

majorxp 06-26-2006 12:57 PM
Quote:
Originally Posted by dark_wizard
A security flaw has been reported in this modification and the author has been contacted for a fix. Until the flaw has been fixed we have removed the files from download. Thank you for your understanding.

It would have been nice to send out an update to all installed users to notify them of the issue so we could uninstall until it is resolved.

/uninstalled
...

Simplicity 06-30-2006 04:16 PM
Looks like we may need to wait a while for the moderators to give this the go-ahead and allow the file download :(

Paul M 07-11-2006 11:39 AM
The XSS security flaw reported in this modification has been fixed [by Staff] and a new zip file (3.5.1a) uploaded, vbugs.php is the file that has changed.

majorxp 07-12-2006 07:53 PM
Thanks Paul!

MThornback 07-12-2006 08:39 PM
Thanks Alot Paul :D

Zelda-King 07-13-2006 06:19 AM
Since upgrading to 3.5.1a the "Title / Submitted By / Date" column in the listbit doesn't look right (see attachment).

Also, using this on vB 3.6 RC1 results in the following errors at the top of the page;

Warning: Invalid argument supplied for foreach() in /vbugs.php on line 123

Warning: Invalid argument supplied for foreach() in /vbugs.php on line 128

Warning: Invalid argument supplied for foreach() in /vbugs.php on line 133

Warning: Invalid argument supplied for foreach() in /vbugs.php on line 138

(I realise this isn't officially ready for 3.6 yet. Just leaving feedback to consider.)

jluerken 08-05-2006 03:35 PM
Zelda-King, I have the same
Warning: Invalid argument supplied for foreach() in /vbugs.php on line 123
...and so on.

Is there any fix available?

jluerken 08-06-2006 10:05 PM
It has problems since vb3.6 with those lines in vbugs.php

PHP Code:
foreach ($bugcache['severity'] as $key => $entry) {
  $selected = iif($vbulletin->GPC['vbug_severityid'] == $key, 'selected="selected"');
  $val = $entry['title'];
  eval('$severitybits .= "' . fetch_template('userfield_select_option') . '";');
}
foreach ($bugcache['type'] as $key => $entry) {
  $selected = iif($vbulletin->GPC['vbug_typeid'] == $key, 'selected="selected"');
  $val = $entry['title'];
  eval('$typebits .= "' . fetch_template('userfield_select_option') . '";');
}
foreach ($bugcache['version'] as $key => $entry) {
  $selected = iif($vbulletin->GPC['vbug_versionid'] == $key, 'selected="selected"');
  $val = $entry['title'];
  eval('$versionbits .= "' . fetch_template('userfield_select_option') . '";');
}
foreach ($bugcache['status'] as $key => $entry)
{
        $statuscount = $db->query_first("
        SELECT count(*) AS status
        FROM " . TABLE_PREFIX . "vbug
        WHERE vbug_statusid = $key
        ");
  $numstatuses = $statuscount['status'];
  $selected = iif($vbulletin->GPC['vbug_statusid'] == $key, 'selected="selected"');
  $val = $entry['title']. " (" .$numstatuses. ")";
  eval('$statusbits .= "' . fetch_template('userfield_select_option') . '";');
} 
The foreeach statement is wrong but I am not a programer to say what has changes with 3.6 and how those lines need to look now. :(


All times are GMT. The time now is 04:23 PM.
Page 24 of 30 « First 142223 24 2526 Last »
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01426 seconds
  • Memory Usage 1,761KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_php_printable
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete