vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Miscellaneous Hacks - Minify CSS (https://vborg.vbsupport.ru/showthread.php?t=202843)

ChiNa 08-25-2012 04:53 AM

I hope that it will work for me,,, thanks

fxdigi-cash 06-25-2013 05:51 PM

I tested it on vb4.2 and nothing changed...!

possibly the minification doesn't work properly... i believe using some minify plugin from google page speed would be a lot better... what do yah think?

Zachery 06-25-2013 06:18 PM

Not sure why you'd think a vBulletin 3.x plugin would work on vBulletin 4.

Alfa1 07-26-2013 09:19 AM

There is a serious security issue with minify: https://groups.google.com/forum/#!ms...E/kwYVpLMkfDwJ

OVERVIEW
========

On some systems running Minify, an attacker may be able to reveal the contents of
arbitrary files. You are strongly advised to follow the instructions below to manually
patch your system, and upgrade to Minify 2.1.7 when possible.


PATCH INSTRUCTIONS
------------------

Open /min/index.php. A comment block begins on line 2.

Insert a line break so that the comment begins on line 3.

Copy and paste the following code onto line 2:

if (isset($_GET['f'])) {
$_GET['f'] = str_replace("\x00", '', (string)$_GET['f']);
}

Save the file.


DETAILS
-------

On some PHP systems, file system functions accept parameters containing null bytes
("\x00"), but do not handle them correctly. See:
http://www.php.net/manual/en/securit....nullbytes.php

An attacker may be able to use Minify to reveal the contents of any file PHP has access to
within the document root, including sensitive configuration files.

Thanks to Matt Mecham for reporting this vulnerability.


MINIFY 2.1.7
------------

You are strongly encouraged to upgrade to Minify 2.1.7, available at these URLS:

* http://code.google.com/p/minify/down...nify-2.1.7.zip
* https://github.com/mrclay/minify/archive/2.1.7.zip

For further support, email min...@googlegroups.com.


All times are GMT. The time now is 08:23 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01450 seconds
  • Memory Usage 1,727KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (4)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete