| Author |
 Topic  |
|
kc070697
Starting Member
USA
29 Posts |
 Posted - 12 June 2002 : 08:23:01
|
Is this fix included in 3.3.05?
|
 |
|
|
Davio
Development Team Member
Jamaica
12217 Posts |
|
|
Esoterica.gr
Starting Member
Greece
43 Posts |
Posted - 16 June 2002 : 08:14:01
|
Hello,
We have the following problem after installing the Bug Fixes that are proposed in post.asp & post_info.asp
- Some of the member's passwords aren't strictly alphanumeric and when they try to post a message (they are logged in succesfully off-cource) they get an error message about invalid password.
- Another problem is of infinite loops after a succesful posting; the congratulations message keeps swowing on and on.
Any suggestions about the problem?
Edited by - Esoterica.gr on 16 June 2002 09:41:18 |
|
|
|
Esoterica.gr
Starting Member
Greece
43 Posts |
Posted - 16 June 2002 : 20:19:10
|
I have the suspicion that the problem maybe connected with the use of greek characters or special symbols in the passwords.
It might seem probable that the altered post.asp or post_info.asp misinterpret these characters as a malicious attempt...
Maybe the problem is related only to non-English environments in which the user can use non standard characters?
|
|
|
|
Jaeda
Starting Member
9 Posts |
Posted - 17 June 2002 : 00:21:26
|
I am also having the problem with the congrats messages looping infinitely. Please advise.
Jaeda
|
|
|
|
Deleted
deleted
4116 Posts |
Posted - 17 June 2002 : 06:12:41
|
quote:
I am also having the problem with the congrats messages looping infinitely. Please advise.
Jaeda
Infinite loops are addressed here (search w. keywords "endless refresh") and that will be solved with with v3.4 as far as I know.
Think Pink
==> Start Internationalization Here |
|
|
|
Davio
Development Team Member
Jamaica
12217 Posts |
Posted - 18 June 2002 : 08:07:09
|
Richard, the fSubscription variable needs to be checked too in post_info.asp.
Change this:Subscription = Request("Subscription")to this:fSubscription = cLng(Request.Form("Subscription"))See Richard's post below.
«------------------------------------------------------»
Want to know when the next version comes out,
as soon as possible? Join our Mailing Lists !
Edited by - Davio on 18 June 2002 16:23:33 |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 18 June 2002 : 15:38:22
|
changed this:
fSubscription = Request("Subscription")
if Request("Subscription") = "" then
fSubscription = 0
end if
to this:
if Request.Form("Subscription") <> "" then
fSubscription = cLng(Request.Form("Subscription"))
else
fSubscription = 0
end if |
|
|
|
Mikael
Starting Member
36 Posts |
Posted - 19 June 2002 : 03:57:11
|
Do you have to keep the instructions on howto hack a forum in these messages. Once you have observed the problem couldn't you just delete the dangerous part of the initial message, bug report, to prevent hackers reading it before a Forum admin can apply a fix?
Maybe you have done so already? I'm not to sure how much info can be gathered from MFHOWLANDs initial message?
|
|
|
|
Slaid99
New Member
Canada
67 Posts |
Posted - 20 July 2002 : 15:42:58
|
Looking over this... I am not sure which patches to apply...
This post has gotten quite long with quite a few issues... is there a way to point to 1 specific fix? I am not fluent in ASP or databases, so am unsure which changes to make and which ones have been made...
This may sound lazy, but can you repost a fix following my message that already contains the corrected lines? Or are there ones that are specific to Access and ones that are specific to SQL?
|
|
|
|
theory
Starting Member
29 Posts |
Posted - 22 July 2002 : 19:50:55
|
quote:
Just replacing the 2 files should take care of it.
As of today, is it still true?
|
|
|
|
G4V
Starting Member
United Kingdom
1 Posts |
Posted - 29 July 2002 : 21:29:33
|
From the download of zipped version of post.asp and post_info.asp above, you still need to apply the subsequent changes above. They are the FORUM_ID to CAT_ID correction and the additional checking on Request.Form("Subscription") - both in post_info.asp, and there's also the extra Trim in post.asp .
Seems to work. 
Eschew fuscation. |
|
|
|
Topic |
|
Forum Locked
Topic Locked
