$db->query('UPDATE '.$db->prefix.'users SET group_id=group_id+1 WHERE group_id!=4 AND group_id!=1 ORDER BY group_id DESC')
You don't need the order_by here
And won't this mess up people who had a group ID of 4 (member) which is now 5?
You are not logged in. Please login or register.
PunBB Forums → Posts by Smartys
$db->query('UPDATE '.$db->prefix.'users SET group_id=group_id+1 WHERE group_id!=4 AND group_id!=1 ORDER BY group_id DESC')
You don't need the order_by here
And won't this mess up people who had a group ID of 4 (member) which is now 5?
Bekko: pun_mail uses PunBB's SMTP settings, not the ones in php.ini
If someone put their SMTP settings in PunBB (which is I think what's happening here) because they need to for the mails to send, then the sending will fail your way
And why in the world do you need to send HTML email when nothing else in PunBB does? n00b
mysql> update foo_groups set g_id=g_id+1 order by g_id desc;
Query OK, 6 rows affected (0.00 sec)
Rows matched: 6 Changed: 6 Warnings: 0
I have a couple extra groups, which is why it's 6 instead of 4
But that's the query (although you also have to set the auto_increment value properly afterwards, or the next time you try to add a group you'll get an error: easiest way to do that is to try to insert a new row in the groups table after updating, but don't catch any errors it causes: just let the script continue to run)
The answer to your first question is that you can (if admin/options/subscriptions are enabled).
And you're not using the quick post form
php.ini is the PHP config file, you won't find it in PunBB
Anyways, this might fix it (although the code should really be rewritten to send one email per person, so I'm not sure it will work):
In functions.php
FIND
mail($recipients,$subject,$message,$headers);
REPLACE WITH
pun_mail($recipients,$subject,$message);
Set the timezone to -5. That should get default time to GMT. Then, run
update prefixusers set timezone = -5 where id = 1
Replace prefix with the DB prefix for your forum.
Also, remove this line in functions.php:
$pun_user['timezone'] = $pun_config['o_server_timezone'];
That should make the Guest user have the correct time when looking at the forums. It also allows users to choose the proper offset.
Works fine for me
Could you have conflicting cookies or something?
What's the site?
http://www.macaddict.com/forums/
Registered users online: 17
Guests online: 340
Or, go directly:
http://punbb.org/download/hdiff/hdiff-1 … .2.11.html
Transactions aren't used by PunBB (at least in MySQL, I can see working transaction functions in the dblayer class for pgsql but I don't know that they're used), the reason being that only MyISAM tables don't support row locking
I remember someone having the same problem. The cause of the problem was the date/time on the server.
And on that note, why not simply double check that time() - $pun_user['last_post'] > 0 as well?
Try downloading the DB management plugin and hitting the "Repair tables" button in it
Grab the version off of PunRes: it seems to have all the files
http://www.punres.org/download.php?id=663
You can't do any of this with MyPunBB, because you don't control the files
You need to get your own hosting and set it up yourself
True but this is a lead to hacking!! Because if you know what your doing and the user has a forum all you have to do is check Config.php
You can't view config.php from the web
Unforinntly the hacker was looking for my site!! (I was using phpbb at the time)... He had a grudge aginst me!! He used google and found a section of my cp!!
Sounds like an insecure setup on your part, not something bad with Google or the forum software (although it could have been something in phpBB)
Alltho the chances of this i do belive arnt there!! If your (Host or domain) (Not sure which give you cpanel) didnt wanna spring the money and get the Newest version or you got yours awhile back Or have a pirated version(Yes i dont understand how it works but yes its there)
You shouldn't be hosting with a host that has a pirated/old version of CPanel: if they don't take security seriously enough, why trust them with your data?
Yes in most cases this is true(If you Cach the document)!! But in some cases you are logged in straight to the cpanel... If you give me your aim or msn i can give you a small example of what i am talking about!....
I don't need an example, I know about Google hacking: the point being that if everyone is doing what they're supposed to be doing (you and your host are keeping up to date) there should be no issue. And if your host isn't, then why are you hosting with them?
The current version covers SMF forums
http://sourceforge.net/projects/punbb
It's there
- cvs and file management.
Rickard has SVN/Trac set up and maintained by Textdrive
- webspace and a project.sourceforge.net resp. project.berlios.de
Textdrive hosts PunBB for free (I think) because it's an open source project
- task management
Trac?
- mailinglist
Already have one
- RSS Feed
See extern.php
and also the goal of thoes portals is to be a place of all OSS people may find them on one point. for developers instred in getting similar ideas may join project and work on existing than re-invent it.
I don't think Rickard is interested in recuriting other developers
Err, artic chill, stop trying to scare people
Yeah but doesnt it just upload on imageshack.us??
No, the attachment mod uploads directly to the forum (but I doubt that's the issue if your folder was outside the web root and thus not publicly accessable: was it?)
Just to let you know even if you did have an opening all it would take is a few bots from a CERTIAN program and your a gonner... Atleast with most forum softwares
Untrue, the only case of that I can think of is the Santy worm for phpBB
Also another thing! People can use google to hacK!! i am not gonna say because if this gets out!! There will be a major problem!! Its all related to the cpannel!!
No they can't and no it isn't
"Google hacking" isn't hacking. It's using Google to find information that it useful for the purposes of hacking (like, say, all sites that have text from a logged in CPanel page). If CPanel was insecure enough that just by submitting your site to Google you'd get hacked, no one would use it
With a little typing and a click here and there your forum is gone! Thats why its allmost better not to submit your site to google so it shows up on searches!! I allready made the misstake and have been hacked 1ounce allready
Having your website in the search engines is part of getting traffic. It's not a "mistake" to do it if that's your aim. Plus, you'll get added eventually (unless you ban them via robots.txt). Getting indexed does not lead to getting hacked unless you do not stay on top of security patches
I am not saying this is the way you got hacked but if you have submitted your site to google its a good chance
No, it really isn't: the chances of CPanel being set up that poorly are low
I'd start by looking at Apache's access logs, seeing what if anything was run near the time it happened
Mmm, worth looking into
The file 'config.php' doesn't exist or is corrupt. Please run install.php before? (I've done this a number of times and always having to delete the tables to re-do...
I have tried and still get this error. I also have been watching the forums and still the error? What else can be wrong?
Another thing I noticed that the config.php is actually pulled up and displayed with mt password info, so I deleted it? What makes this happen?
Thanks
That sounds like you deleted the <?php bit on top, so the stuff wasn't getting parsed properly
But yeah, if you deleted the file it can't very well read from it
Setting signatures to a max of 0 lines and removing all pre-existing sigs should work for your sig problem
I don't know much about DoS but wouldn't it be easier to add a simple CAPCHA to the registration form?
That way the legitimate reasons for multiple users using the same IP (some mentioned above) would not cause any problems.
Except then Rickard would have to code a CAPTCHA
Plus, a popular thing now seems to be mass requesting CAPTCHAs and using it as a DoS attack on the site (since it's so busy generating the CAPTCHAs, which take a lot of CPU)
Smartys wrote:You manually updated it, which didn't delete the config cache file
Check out the cache folder, delete the cache_config.php fileI delete everything in cache directory, but still doesn't work.
Any suggestion?
So you manually updated the version in the database and then deleted config_cache.php? Then try clearing the cache on your computer
PunBB Forums → Posts by Smartys
Powered by PunBB, supported by Informer Technologies, Inc.