Thanks for the great hack.
I had some problems, too. I just installed this on my vb 2.2.5 board, and nothing was showing for me. I tried logging out, logging in as a normal user, using the vb as a guest, etc. Nothing. Then I read through all the messages carefully, and found the original $lastsearch= code. I changed
$lastsearches=$DB_site->query('SELECT searchid,postids,dateline,querystring FROM search LEFT JOIN user USING (userid) WHERE querystring!="" AND usergroupid NOT IN (5,6,7) ORDER BY searchid desc LIMIT 0,10');
to the original
$lastsearches=$DB_site->query('SELECT searchid,querystring FROM search WHERE querystring!="" ORDER BY searchid desc LIMIT 0,10');
Then EVERYTHING appeared.
I then reverted it back to the new code... and bam... it continued working.
As I see a lot of the people here had the original code, then updated it to the security corrected code... I think there might be some issues for brand new installs. Something overlooked.
Also, searches by guests don't show with the security corrected code. Only ones made by normal users. Is that normal?
|