Snitz Forums 2000
Snitz Forums 2000
Home | Profile | Register | Active Topics | Members | Search | FAQ
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 Snitz Forums 2000 MOD-Group
 MOD Add-On Forum (W/Code)
 Search Form Enhancement - Ver 20030616 (XSS Fix)
 New Topic  Topic Locked
 Printer Friendly
Next Page
Author Previous Topic Topic Next Topic
Page: of 2

work mule
Senior Member

USA
1358 Posts

Posted - 16 June 2003 :  20:50:39  Show Profile
Sorry folks, I screwed up on this one. If you used the Search Enhancement Mod, you'll need to update it to remove a couple of XSS vulnerability.

Sneaky little bastards. Leave a hole open and they'll find it.

Once again, I apologize any inconveniences.

Download
http://www.snitzbitz.com/mods/details.asp?Version=All&mid=65

Besides the XSS fixes, I updated the file to fix some of the things that came up in the original thread.

Original Snitz Forum Enhancement MOD
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=35897

Edited by - work mule on 16 June 2003 22:43:46

dayve
Forum Moderator

USA
5820 Posts

Posted - 16 June 2003 :  22:45:48  Show Profile  Visit dayve's Homepage
Thank You Sir.

Go to Top of Page

spearson
Starting Member

United Kingdom
11 Posts

Posted - 18 June 2003 :  20:52:04  Show Profile
Greate improvement on the search page.

I've just added the search page to my forum but the start date is comming up as a future date.

I might be missing something but looking at the ASP I can't see the relevance of the
If Month(now()) = 1 Then
statements in the section of your ASP below

If the intention of the
'Set to the number of days for the default range to search for posts
   intSearch_DefaultRange = 180 'Number of days

is to search the previous 3 months then the commenting out that I have made below seems to work.


	Select Case strSearch_DateType
		case "mdy","mmdy","mmmdy"
			DisplaySelectObject strSearchMonthFormat,"start_month", Month(now()-intSearch_DefaultRange)
'			DisplaySelectObject "date_numeric","start_day", Day(now()-intSearch_DefaultRange)
			DisplaySelectObject "date_numeric","start_day", Day(now())
'			If Month(now()) = 1 Then
				DisplaySelectObject "years_forum","start_year", Year(now()-intSearch_DefaultRange)
'			Else
'				DisplaySelectObject "years_forum","start_year", Year(now()-intSearch_DefaultRange)
'			End If
		case "ymd","ymmd","ymmmd"
'			If Month(now()) = 1 Then
			DisplaySelectObject "years_forum","start_year", Year(now()-intSearch_DefaultRange)
'			Else DisplaySelectObject "years_forum","start_year", Year(now())
'			End If
			DisplaySelectObject strSearchMonthFormat,"start_month", Month(now()-intSearch_DefaultRange)
			DisplaySelectObject "date_numeric","start_day", Day(now())
		case "ydm","ydmm","ydmmm"
'			If Month(now()) = 1 Then
			DisplaySelectObject "years_forum","start_year", Year(now()-intSearch_DefaultRange)
'			Else DisplaySelectObject "years_forum","start_year", Year(now())
'			End If
			DisplaySelectObject "date_numeric","start_day", Day(now())
			DisplaySelectObject strSearchMonthFormat,"start_month", Month(now()-intSearch_DefaultRange)
		case Else '"dmy","dmmy","dmmmy"
			DisplaySelectObject "date_numeric","start_day", Day(now())
			DisplaySelectObject strSearchMonthFormat,"start_month", Month(now()-intSearch_DefaultRange)
'			If Month(now()) = 1 Then
			DisplaySelectObject "years_forum","start_year", Year(now()-intSearch_DefaultRange)
'			Else DisplaySelectObject "years_forum","start_year", Year(now()-intSearch_DefaultRange)
'			End If
	End Select

Stuart

Edited by - spearson on 18 June 2003 20:53:12
Go to Top of Page

work mule
Senior Member

USA
1358 Posts

Posted - 19 June 2003 :  04:35:03  Show Profile
Stuart, you're right, the check for If Month(now()) = 1 Then isn't required.

I was looking at that and trying to figure out why that was done like that. It turns out that in the previous version I didn't have the intSearch_DefaultRange variable. In place of it, I had hardcoded in '30'. That's why that check was added in. When I added in the variable, I replaced the value of '30', but I guess I didn't reconsider the logic.

Here's what it used to look like, which made sense at the time.
http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=35897&whichpage=3
Go to Top of Page

pbo
Starting Member

Denmark
19 Posts

Posted - 22 June 2003 :  17:56:55  Show Profile
sorry, but it does not seems to work - I get no results doing a search - using 3.4.03
Go to Top of Page

rsoxhater
Junior Member

120 Posts

Posted - 20 July 2003 :  22:59:56  Show Profile
MY users LOVE this search page - THANK YOU!!
Go to Top of Page

MarcelG
Retired Support Moderator

Netherlands
2625 Posts

Posted - 22 July 2003 :  08:35:35  Show Profile  Visit MarcelG's Homepage
Workmule -> Great work!

portfolio - linkshrinker - oxle - twitter
Go to Top of Page

AWD_ENVY
Junior Member

103 Posts

Posted - 23 July 2003 :  10:47:56  Show Profile
Anyone have this working with MySQL
My hosts current host version of MySQL is 3.23.56-max-nt
Go to Top of Page

gareth_moore_2000
Junior Member

United Kingdom
262 Posts

Posted - 05 August 2003 :  16:55:42  Show Profile
I too am stuck with this mod !
I have installed it and when I do a search it only ever comes up with 1 or 2 topics (but if I use the regular search page it can come up with hundreds !) -even if I type something simple such as 'lol' it only ever comes up with one or two replies !

I have checked the dates and they are fine !

whats up ?!
Go to Top of Page

gareth_moore_2000
Junior Member

United Kingdom
262 Posts

Posted - 07 August 2003 :  14:49:51  Show Profile
hello ?
Go to Top of Page

OneWayMule
Dev. Team Member & Support Moderator

Austria
4969 Posts

Posted - 07 August 2003 :  15:08:59  Show Profile  Visit OneWayMule's Homepage  Send OneWayMule an ICQ Message
gareth, I suggest you show a bit more patience, I'm sure work mule will take a look at that issue (although I'm not sure if it actually is a bug).

My MODs:
Birthdays - Custom Policy - F.A.Q. Administration - Forum Rules - Guestbook
Links Manager - MyOwnGoogle - Profile Views - Search Log - WebSearch

Useful stuff:
Forum and MOD Installation - MOD Installation Guide - Snitz v3.4.05 Readme - Free ASP Hosts - Support Snitz
Go to Top of Page

JakeG
Starting Member

USA
9 Posts

Posted - 03 September 2003 :  17:22:22  Show Profile  Visit JakeG's Homepage  Send JakeG an AOL message
I was having problems with 3.4.03 and MySQL.

I changed line 506 to be this:
iPageTotal = CInt(rsCount(0).value)

and my searches started to work.




- Jake
www.nthelp.org / www.computershowoff.com

Microsoft MVP - IIS
http://mvp.support.microsoft.com
Go to Top of Page

Cliff
Average Member

United States
501 Posts

Posted - 08 October 2003 :  23:15:42  Show Profile  Visit Cliff's Homepage
This looks great, but I am getting this error:

Microsoft VBScript compilation error '800a0411' 

Name redefined 

/bloodbank/forum2/search_mod.asp, line 54 

Dim strUseMemberDropDownBox
----^


Using Access 2000.

Any tips??
Go to Top of Page

spearson
Starting Member

United Kingdom
11 Posts

Posted - 14 October 2003 :  06:42:38  Show Profile
It sounds like the strUseMemberDropDownBox variable has been dim'ed previously on another page.

On line 48 you should have your config.asp page included. This config.asp page also dim's variables
I'd check that this variable name has not been used there (possibly in code form another MOD).

Stuart
Go to Top of Page

vmplanet
Junior Member

112 Posts

Posted - 31 October 2003 :  19:21:37  Show Profile
I have a problem with this mod. When i search for post i get this:

Search Results for post
Searching Text in Subject & Message of posts in All Forums (Non-Archived)
Posted Between 05 Jan 2003 - 11 Jan 2003

But the dates are:

01 may 2003 till 01 november 2003. Somehow it turns the dates around.
Go to Top of Page

acoustika
Junior Member

Denmark
311 Posts

Posted - 28 November 2003 :  11:26:00  Show Profile  Visit acoustika's Homepage  Send acoustika an ICQ Message
I have a problem with this Mod after upgrading to MySql, befor on Access it worked fine, but after my upgrade it ends the table right after post/author field, you can see it here, very odd I think, the same page worked on MySql, and I haven.t changed anything beside a little link to the normal search on bottom.
www.uniquedk.dk/forum/udvidetsearch.asp


Well I have tried the original again, and that works, so it is my link that has screwed up the tables for MySql apparently, I will give it a go again then ;-)


Hmmm, Nope Actually it's when I set it to fetch the staff members from the databse it goes wrong.
Anyone who can help with this?????

Nice MOD

May The Code Be With You
www.UniqueDk.dk *** The Open Forums of Denmark ***

Edited by - acoustika on 28 November 2003 11:37:04
Go to Top of Page
Page: of 2 Previous Topic Topic Next Topic  
Next Page
 New Topic  Topic Locked
 Printer Friendly
Jump To:
Snitz Forums 2000 © 2000-2021 Snitz™ Communications Go To Top Of Page
This page was generated in 0.2 seconds. Powered By: Snitz Forums 2000 Version 3.4.07