Snitz Forums 2000
Snitz Forums 2000
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 Snitz Forums 2000 DEV-Group
 DEV Bug Reports (Open)
 (v3.1SR4)&(v3.3.xx) Security related bug - profile
 New Topic  Topic Locked
 Printer Friendly
Previous Page
Author Previous Topic Topic Next Topic
Page: of 2

Deleted
deleted

4116 Posts

Posted - 19 May 2002 :  10:12:50  Show Profile
There are 6 in pop_profile.asp (also checked from new download). Do you all have MODs installed?

Think Pink
==> Start Internationalization Here
Go to Top of Page

crash
Advanced Member

Netherlands
2064 Posts

Posted - 19 May 2002 :  10:58:34  Show Profile  Visit crash's Homepage
yes. but the error is not due to any installed mods...



Crash's Site | Crash is from
Go to Top of Page

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 19 May 2002 :  11:28:03  Show Profile
what is in your address bar when you get that error? Is the id missing from the querystring?
Go to Top of Page

crash
Advanced Member

Netherlands
2064 Posts

Posted - 19 May 2002 :  11:33:56  Show Profile  Visit crash's Homepage
http://www.mydomain.com/pop_profile.asp?mode=goEdit&id=


but that has always been the case...



Crash's Site | Crash is from
Go to Top of Page

Xstream-PT
Starting Member

45 Posts

Posted - 20 May 2002 :  12:54:06  Show Profile
I've installed the update, but now I can not update my signature in the profile.... Anyone know why? I made a change to my signature and then went back in to see if the change was applied, and my signature field was blank.

X

Go to Top of Page

ISJX_YICK
New Member

France
68 Posts

Posted - 21 May 2002 :  10:05:32  Show Profile  Visit ISJX_YICK's Homepage  Send ISJX_YICK an ICQ Message
i applied the patch and had no problem but !!!

there is not 9 in pop_profile, but 6

but in the 3 you count more it's because it's included in the 2nd string !!
-----
if you first apply the change you'll have 4 time the good one and
2 time the following

4 X : cLng(Request.QueryString("id"))

2X : ChkString(cLng(Request.QueryString("id")), "SQLString")

because

ChkString(Request.QueryString("id"), "SQLString")


i only changed my pop_profile, is there anywhere else to go ?

WOW THAT's NICE !!!

Edited by - ISJX_YICK on 21 May 2002 10:07:26
Go to Top of Page

MFHOWLAND
Starting Member

6 Posts

Posted - 22 May 2002 :  11:07:00  Show Profile
It is probably preferrable to do the following (instead of converting to long) because you dont want your page to just error out:

IF IsNumeric(Request.QueryString("ID")) THEN
RESPONSE.REDIRECT "Error.asp"
RESPONSE.END
END IF

This gives you a nice little error page you can write to handle this. You could also notify the sysadmin in this script that USERA has tried to do this command (and if he does it a few times then kick him out!)

Thanks,
Marshall


Go to Top of Page

RichardKinser
Snitz Forums Admin

USA
16655 Posts

Posted - 22 May 2002 :  18:48:14  Show Profile
If you had looked at the pop_profile.asp file in the v3.3.05 release, you would have noticed that we are showing an error message instead of just letting the page error out.
Go to Top of Page

Deleted
deleted

4116 Posts

Posted - 23 May 2002 :  07:00:10  Show Profile
For v4b03 users: Updated the patch004 to include this security fix, but forgot to post this at that time. See here: ===== POST V40B03 PATCHES =====

Think Pink
==> Start Internationalization Here
Go to Top of Page

mtn_roadie
Starting Member

USA
18 Posts

Posted - 08 July 2002 :  15:31:51  Show Profile  Visit mtn_roadie's Homepage
Sorry if this has been answered elsewhere, but I wasn't able to find it.

I'm running v3.3.03 - but have made several mods to some of the pages and do not feel comfortable updating to the latest version due to the possibility of several of my mods being lost.

pop_profile is not one of the files of modified...... is it OK to just replace the v3.3.03 with the new pop_profile.asp from v3.3.05?

::kindler chase::
Roubaix Interactive
http://www.roubaixinteractive.com
Go to Top of Page
Page: of 2 Previous Topic Topic Next Topic  
Previous Page
 New Topic  Topic Locked
 Printer Friendly
Jump To:
Snitz Forums 2000 © 2000-2021 Snitz™ Communications Go To Top Of Page
This page was generated in 0.4 seconds. Powered By: Snitz Forums 2000 Version 3.4.07