Search options (Page 293 of 307)

Oh cool, a missing punhtmlspecialchars

Edit: It would be nice if these things were reported to Rickard (at least) in addition to being posted at these places
http://www.securitytracker.com/alerts/2 … 13446.html

Well, where-ever avatars are displayed
So, when they're displayed (not uploaded) on profile.php
viewtopic.php as well

Manually change places that display from using $pun_config['o_avatars_dir']

Damn, in fixing the SQL errors I mess up the already working code it seems

Mmm, silly me, trying to make the posts array an intval
With crappy looking (and probably invalid) markup, it's ready for beta! Now to find someplace to upload it!

http://www21.brinkster.com/keyrex1/Spli … 1_beta.zip

Have fun (remember, it's a beta, so don't use it in a production environment and report all bugs to me)
Oh, and to download it, right click and choose Save Target as

Mmm, good point :-/

Try using ../ and such to make the path relative?

I can't replicate that on my forum, I get a Bad Request page

Edit: and on another forum of mine I get 127.0.0.1

Seems you missed this

    // Is get_host an IP address or a post ID?
    if (preg_match('/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/', $_GET['get_host']))
        $ip = $_GET['get_host'];

While I don't know regular expressions (actually, this one I understand: max of 3 digits, digits are 0-9, digits are seperated by .s), in debug mode it's telling me 2' is considered a post id (which due to the intval later on is changed to 2)

Edit again: However, I found something similar:
http://www.someplace.com/forum/moderate … .500.500.1
Warning: gethostbyaddr(): Address is not in a.b.c.d form in[place]\forum\moderate.php on line 53
Basically, just make up a number outside the range.
Not very serious other then the path disclosure tbh

Oh yes, and nice work removing the copyright on the forum:
http://forum.pch-team.com/index.php

You made a comment outside of the PHP tags
Your insert query structure is wrong
should be

insert into [table] ([column], [column]) values ([value], [value])

It's not a problem, it's an intentional feature decision by Rickard

That actually took very little work to mod so as to work alright. Now I just have to fix a couple SQL errors that can be caused and change the layout over to 1.2.3 style (which I might have trouble with )

So if someone can re-do the markup for me and save me the trouble, that would be super *hint hint*

Unixtime
http://www.onlineconversion.com/unix_time.htm

Nibbler, you pwn: that's EXACTLY what I need