Snitz Forums 2000 - need help security breach with active users MOD

Snitz Forums 2000

Username:	Password:
Save Password
Forgot your Password?

All Forums

Help Groups for Snitz Forums 2000 Users

Help: MOD Implementation

need help security breach with active users MOD

New Topic

Topic Locked

Printer Friendly

Author

Topic

Page: of 2

ruirib
Snitz Forums Admin

Portugal
26364 Posts

Posted - 13 August 2002 : 21:31:03

Have you tried the fix on that post by Richard? Try it and let me know if it works for you...

Snitz 3.4 Readme | Like the support? Support Snitz too

Nathan
Help Moderator

USA
7664 Posts

Posted - 13 August 2002 : 21:40:49

Its quite possible that upgraind to active users 4.0 will patch the Active Users part of it. The bug will still be there of coarse, but I think the link might be gone.

Also, upgrading your forum to 3.4 (when it comes out) will fix the bug.

Nathan Bales
CoreBoard | Active Users Download

Oap Assassin
Starting Member

United Kingdom
9 Posts

Posted - 13 August 2002 : 21:45:37

so let me get this straight my forum looks like this

select case strRqMethod
		case "Topic"
			if (blnCStatus = 0) and (AdminAllowed = 0) then
				Go_Result "You have attempted to post a New Topic to a Locked Category"
			end if
			if (blnFStatus = 0) and (AdminAllowed = 0) then
				Go_Result "You have attempted to post a New Topic to a Locked Forum"
			end if
		case "EditTopic"
			if ((blnCStatus = 0) or (blnFStatus = 0) or (blnTStatus = 0)) and (AdminAllowed = 0) then
				Go_Result "You have attempted to edit a Locked Topic"
			end if
		case "Reply", "ReplyQuote", "TopicQuote"
			if ((blnCStatus = 0) or (blnFStatus = 0) or (blnTStatus = 0)) and (AdminAllowed = 0) then
				Go_Result "You have attempted to Reply to a Locked Topic"
			end if
		case "Edit"
			if ((blnCStatus = 0) or (blnFStatus = 0) or (blnTStatus = 0)) and (AdminAllowed = 0) then
				Go_Result "You have attempted to Edit a Reply to a Locked Topic"
			end if
	end select
end if
 
select case strSelectSize
	case "1"
		intCols = 45
		intRows = 6
	case "2"
		intCols = 70
		intRows = 12
	case "3"
		intCols = 90
		intRows = 12
	case "4"
		intCols = 130
		intRows = 15
	case else
		intCols = 70
		intRows = 12
end select

Oap Assassin
Starting Member

United Kingdom
9 Posts

Posted - 13 August 2002 : 21:48:08

you want it to look like this

	select case strRqMethod
		case "Topic"
			if (blnCStatus = 0) and (AdminAllowed = 0) then
				Go_Result "You have attempted to post a New Topic to a Locked Category"
			end if
			if (blnFStatus = 0) and (AdminAllowed = 0) then
				Go_Result "You have attempted to post a New Topic to a Locked Forum"
			end if
		case "EditTopic"
			if ((blnCStatus = 0) or (blnFStatus = 0) or (blnTStatus = 0)) and (AdminAllowed = 0) then
				Go_Result "You have attempted to edit a Locked Topic"
			end if
		case "Reply", "ReplyQuote", "TopicQuote"
			if ((blnCStatus = 0) or (blnFStatus = 0) or (blnTStatus = 0)) and (AdminAllowed = 0) then
				Go_Result "You have attempted to Reply to a Locked Topic"
			end if
		case "Edit"
			if ((blnCStatus = 0) or (blnFStatus = 0) or (blnTStatus = 0)) and (AdminAllowed = 0) then
				Go_Result "You have attempted to Edit a Reply to a Locked Topic"
			end if
	end select
	if not(chkForumAccess(strRqForumID,MemberID)) then
		Go_Result "You do not have access to post to this forum"
	end if
end if
 
select case strSelectSize
	case "1"
		intCols = 45
		intRows = 6
	case "2"
		intCols = 70
		intRows = 12
	case "3"
		intCols = 90
		intRows = 12
	case "4"
		intCols = 130
		intRows = 15
	case else
		intCols = 70
		intRows = 12
end select