NukeXchange Network

          

Nuke Sites Link Directory
Nuke Fixes · NukeForums · NukeZone Hosting · NukeUnited · Nuke Sites · Nuke Skins · NukeLance
Nuke Resources
 :: Home  :: Downloads  :: Your Account  :: Forums  :: Advertise :: 
Login or Register
Main Menu
General
 Main
 AvantGo
 Banner_Clients
 cfaq
 Donations
 Downloads
 Forums
 Members_List
 Private_Messages
 Search
 Stories_Archive
 Submit_News
 Surveys
 Topics
 Web_Links
 Your_Account

Your Account
 Login
 Register
 Lost Pass

Modules
Quick Links
· CMS Focus
· Domain Names
. Game Quest
· Learning Linux
. MateMaker
· NukeFixes
· NukeForums
· NukeLance
· Nuke Sites
· Nuke Skins
· NukeZone Hosting
. SearchDevil
Other Options

Download Resources
· Nuke Downloads
· Add a Link
· New Files
· Top Rated
· Most Popular

Web Site Resources
· Nuke Sites
· Add A Site
· New Sites
· Top Rated
· Most Popular

Support
· NukeZone Hosting
· NukeSkins.com
· NukeForums.com
· phpnuke.org
· NukeFixes.com
Information
NukeForums
·Website optimization
·Multilingual search engine optimization
·Rapidshare script/mini host script not allowing downloads
·Members Cant Logon My Site or View Forums & Member Profi
·Approved Membership for 8.0
·I want to use full HTML content in the welcome page...
·Changed style from subsilver, folder images now dont display
·Installing the forum upadates
·PHP-Nuke SQL Injection Vulnerability Fix
·New Story Links Problem

read more...
Top10 Links
· 1: Nuke Forums
· 2: PHPNukeFiles
· 3: NukeSkins
· 4: Nuke Templates
· 5: EcomJunk
· 6: MDesign
· 7: Windows Installation: PHP
· 8: FLASH-FOR-NUKE
· 9: Dezina
· 10: Global Dream News Sharing Portal!
Site Visitors
User Login:

Nickname:
Password:
Security Code: Security Code
Type Security Code Here:

Members List Membership:
Latest: landervn
Today: 2
Yesterday: 1
Overall: 14902

Visitation:
Guests: 785
Members: 1
Total: 786


You are Anonymous user. You can register for free by clicking here
Sponsor Links
php-Nuke Themes and Templates
php-Nuke Themes and Templates

NukeResources :: View topic - Nuke 8.1 Patched error
NukeResources Forum Index

NukeResources Forum Index -> Bug Reports -> Nuke 8.1 Patched error
Post new topic  Reply to topic    View previous topic :: View next topic 
Nuke 8.1 Patched error
PostPosted: Sun Aug 12, 2007 10:45 am Reply with quote
ice
Resource Seeker
Resource Seeker
 
Joined: Aug 12, 2007
Posts: 2




Hello,
After i replace mainfile.php with 8.1 pached file, i got a blank page. In source i have this:

LINK REL="StyleSheet" HREF="themes//style/style.css" TYPE="text/css"
</head>

at the end of file.
What is wrong?
Sorry for my english.
View user's profile Send private message
PostPosted: Mon Aug 27, 2007 6:37 pm Reply with quote
Tiggy
Resource Seeker
Resource Seeker
 
Joined: Jan 13, 2007
Posts: 11




Same here,

Seems like header.php can't get needed data from db or something like that ... <title> is empty .... same as $ThemeSel ...

Any ideas?
View user's profile Send private message
PostPosted: Mon Aug 27, 2007 11:14 pm Reply with quote
chatserv
Site Admin
Site Admin
 
Joined: Apr 21, 2002
Posts: 1732
Location: Puerto Rico




Replace mainfile.php with the one included with PHP-Nuke 8.1

_________________
NukeResources | ScriptHeaven
View user's profile Send private message Visit poster's website
PostPosted: Tue Aug 28, 2007 2:36 am Reply with quote
Tiggy
Resource Seeker
Resource Seeker
 
Joined: Jan 13, 2007
Posts: 11




WHat about the fixes then? Security flaws?
View user's profile Send private message
PostPosted: Tue Aug 28, 2007 6:59 am Reply with quote
chatserv
Site Admin
Site Admin
 
Joined: Apr 21, 2002
Posts: 1732
Location: Puerto Rico




A few but most are bug fixes that were left out, replacing the file is a temporary solution until i double check that particular Nuke version to see what conflicts occured.

_________________
NukeResources | ScriptHeaven
View user's profile Send private message Visit poster's website
Please let us know when your new patch will be available.
PostPosted: Tue Aug 28, 2007 3:49 pm Reply with quote
ice
Resource Seeker
Resource Seeker
 
Joined: Aug 12, 2007
Posts: 2




chatserv wrote:
A few but most are bug fixes that were left out, replacing the file is a temporary solution until i double check that particular Nuke version to see what conflicts occured.


Please let us know when your new patch will be available.
Thanks.
View user's profile Send private message
PostPosted: Thu Aug 30, 2007 6:44 pm Reply with quote
chatserv
Site Admin
Site Admin
 
Joined: Apr 21, 2002
Posts: 1732
Location: Puerto Rico




I'm not too clear about the changes FB made but i do think the check_html function needs to be rewritten.

_________________
NukeResources | ScriptHeaven
View user's profile Send private message Visit poster's website
RE: Nuke 8.1 Patched error
PostPosted: Wed Sep 12, 2007 2:52 am Reply with quote
AFaisal
Resource Seeker
Resource Seeker
 
Joined: Jan 19, 2005
Posts: 6




This blank page came from function 'function check_words($Message) {'. To fix this open mainfile.php and find
Code:
function check_words($Message) {
   global $CensorMode, $CensorReplace;
add $CensorList after $CensorReplace, don't forget to add 'comma' to seperate.

find
Code:
return $EditedMessage;
replace
Code:
return $Message;


I hope this can fix problem.
View user's profile Send private message
$CensorMode
PostPosted: Mon Sep 17, 2007 3:51 am Reply with quote
arnoldkrg
Resource Newbie
Resource Newbie
 
Joined: Sep 18, 2004
Posts: 21




I think I have the solution to this problem (discovered whilst testing the 3.4 patches for PHP-Nuke 8.0, but I assume it is the same problem in 8.1)

In mainfile.php around line 221 we have a whole bunch of variables selected from the nuke_config table, but which are processed by the filter() function. For example
Code:
$sitename = filter($row['sitename'], "nohtml");


The filter() function passes (eventually) its parameters to the check_words() function via
Code:
$what = check_words($what);


Inside the check_words() function, a series of conditions are applied as follows:
Code:
if ($CensorMode == 1) {


and
Code:
if ($CensorMode == 2) {


and
Code:
if ($CensorMode == 3) {


where $EditedMessage is set.

The check_words() function finally returns $EditedMessage.

However, if we go back to line 221 where the filter functon was originally called, we can see that $CensorMode is not set until line 260 via
Code:
$CensorMode = intval($row['CensorMode']);


So, when the filter() function was first called, $CensorMode hadnt been set and was effectively NULL and none of those conditionals in the check_words() function caters for that possibility. So EditedMessage is not set and remains NULL so the check_words() function returns NULL for all calls to the filter() function from line 221 to 260.

SOLUTION

Move the setting of $CensorMode from line 260 to before the first call to the filter() function as follows: (around line 221)

Code:
$result = $db->sql_query("SELECT * FROM ".$prefix."_config");
$row = $db->sql_fetchrow($result);
$CensorMode = intval($row['CensorMode']);
$sitename = filter($row['sitename'], "nohtml");
$nukeurl = filter($row['nukeurl'], "nohtml");
$site_logo = filter($row['site_logo'], "nohtml");


Now $CensorMode is set before the call to the filter() function and the subsequent call to the check_words() function has $CensorMode set and returns an actual value for $EditedMessage.

Tested and working on PHP-Nuke 8.0 with the 3.4 patches

One final note. This was tested on a server with php5.x installed. Maybe this is a problem with php5.x specifically because this doesnt seem to affect servers with php4.x installed (I checked)
View user's profile Send private message
PostPosted: Thu Sep 27, 2007 11:05 pm Reply with quote
chatserv
Site Admin
Site Admin
 
Joined: Apr 21, 2002
Posts: 1732
Location: Puerto Rico




Nice catch arnoldkrg. I updated the 8.0 patch but the one for 8.1 will still not include mainfile.php untill i get a chance to examine it closely.

_________________
NukeResources | ScriptHeaven
View user's profile Send private message Visit poster's website
Nuke 8.1 Patched error
 NukeResources Forum Index -> Bug Reports
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT - 4 Hours  
Page 1 of 1  

  
  
 Post new topic  Reply to topic     



Powered by phpBB © 2001-2005 phpBB Group.     Theme created by Vjacheslav Trushkin.
There have been 194 unique hit(s) in the past 24 hours.
Forums ©
Download the Best Archiver in the World


Best viewed with a Browser
All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2001 - 2007 by NukeResources.com
You can syndicate our news using the file .backend.php or ultramode.txt
PHP-Nuke Copyright © 2004 by Francisco Burzi. This is free software, and you may redistribute it under the GPL. PHP-Nuke comes with absolutely no warranty, for details, see the license.
Page Generation: 0.39 Seconds

:: Eos phpbb2 style by Cyberalien :: PHP-Nuke theme by www.nukemods.com ::