Read this: http://punbb.org/forums/viewtopic.php?id=10518

277

(9 replies, posted in PunBB 1.2 show off)

I think the theme looks great, although the vertical gray/white gradients on either side of the forum don't match the its colors particularly well.

278

(68 replies, posted in PunBB 1.2 discussion)

You'd have to change it in footer.php.

It doesn't look like a change with which Rickard or any of the other developers would take issue, but I can't speak for them for certain.

279

(3 replies, posted in PunBB 1.2 troubleshooting)

How many users does your forum have? The plugin may be having trouble trying to send too many emails at once.

280

(20 replies, posted in PunBB 1.2 troubleshooting)

thegleek wrote:

this entire DST crap that GWB invoked is completely stupid and messed a lot of things up.

There are some advantages to it:

Thanks to passage of the Energy Policy Act of 2005, Daylight Saving Time will begin one month earlier in 2007 and will continue for an extra week. It's part of a phased move designed to conserve electricity and save an estimated 300,000 barrels of oil a year.

281

(3 replies, posted in PunBB 1.2 discussion)

Not that I've heard. What's wrong with the current way of doing things?

lie2815 wrote:

Same as redwop:
I have the miniportal on my front page and I want to include the extern file with a php include, but it doesn't work. How can I do this?

Where have you been placing the include code?

I believe the book generator plugin might accomplish what you're asking for (although I can't find the demo so I'm not sure), but you'll have to email its author if you'd like to download it.

Yes, I believe it does work with PunBB 1.2.x, and from the sound of your request it is indeed what you want.

Please enable debug mode and paste the full error.

a. Yes

b. Well, start by adding the mod I linked to, I'm not sure what exactly you want in terms of sorting the forums by language, however.

287

(14 replies, posted in PunBB 1.2 show off)

GregK wrote:

@pogenwurst: yeah, Terrible Ted wink

Awesome, I love Ted Nugent!

Awesome, thanks.

Time and time again, users post here complaining about error messages, only to be told to enable debug mode and post back again. This wastes time and is just plain annoying.

Why not add a message under errors like "Administrator: before requesting support, enable debug mode as explained in PunBB's documentation to receive more information regarding the nature of this error."? Undoubtedly the headache above will continue to occur, but its frequency may be lessened and some users might be able to decipher the errors themselves.

290

(18 replies, posted in General discussion)

grudon66 wrote:

Thanx smile Bott now stays it: An error was encountered
Error: Unable to fetch the portal news.  What is the problem? plz help smile

Enable debug mode and paste the full error, please.

If you include the proper files to integrate with PunBB as outlined in the docs, it should work. $pun_user['username'] will suffice if you want a lazy hack; $pun_user['id'] would be better but you'd need to alter the datatype of the name column in Wordpress's database and alter the query in Wordpress's comment display to join with PunBB's user table.

292

(14 replies, posted in PunBB 1.2 show off)

GregK wrote:

I used to post a bit at Nugent's bb years ago.

Nugent? As in Ted Nugent?

I like your logo. smile

294

(6 replies, posted in PunBB 1.2 troubleshooting)

Peter wrote:

What does $db->escape do? I've tried using that on firstname and surname, but it had no effect.

It sanitizes data before inserting it into the database to prevent errors and/or SQL injects. You shouldn't need it for names as long as your code checks that the input is nothing but letters, spaces, and/or hyphens.

Your code isn't doing either, so you ought to fix that.

Peter wrote:

I've tried several variations, but keep getting this when I try to sign up:

Enable debug mode to get a clearer idea of what the error is.

And yes, you are missing some. Your code should be like this, unless I'm flubbing up the quotes and slashes as I tend to do:

$db->query('INSERT INTO '.$db->prefix.'users (firstname, surname, username, group_id, password, email, email_setting, save_pass, timezone, language, style, registered, registration_ip, last_visit) VALUES(\''.$firstname.'\', \''.$surname.'\', \''.$db->escape($username).'\', '.$intial_group_id.', \''.$password_hash.'\', \''.$email1.'\', '.$email_setting.', '.$save_pass.', '.$timezone.' , \''.$db->escape($language).'\', \''.$pun_config['o_default_style'].'\', '.$now.', \''.get_remote_address().'\', '.$now.')') or error('Unable to create user', __FILE__, __LINE__, $db->error());

Ok, let's say I'm this malintentioned user. I'll view your page's source and look at the action attribute of the form and the name attributes for all the inputs. Then, I'll write my own form to match (with the name field editable), save it to my computer, open it in my browser, and let the fun begin.

The problem is that anyone can send data to a comment form, forum, etc. It's up to the site's owner or software's developer to account for this. For example, PunBB (for some forms) and many other applications use referrer checks to prevent such an attack, but referrer headers are easily spoofed (I think I read on Trac or the PunBB development blog that another system was being implemented). I'm not sure whether or not Wordpress has anything against this in place.

In short: don't send users' identities through a form. Use PunBB's integration features to determine users' identities on the page that processes the form (not the page that displays it).

I'm not sure how great an idea it is to insert values into the Wordpress comment box like that because it doesn't seem as if that in any way stops a malintentioned user from writing their own comment form that will submit any name they wish. Also, it will cause problems if a user's name on the forum is edited.

It might be better to modify Wordpress to fetch the user ID when processing the comment and insert that in place of the name and then editing the comment display to fetch the username based upon each user ID (that could probably be done with a JOIN on the query that fetches the comments).

297

(6 replies, posted in PunBB 1.2 show off)

Just as a tip, I'd move many, if not all posts out of that archive you have. It'll be tiresome work to do so, I'm sure, but you're unlikely to attract new posters with one zero after another in the posts and topics columns.

298

(4 replies, posted in PunBB 1.2 show off)

Ok, thanks for explaining.

As I said above, many of the links do not work (including many in the top navigation, the recent topics, and the active topics). Also, IMO the footer is too large and busy, and the text it contains is too difficult to read.

Otherwise, very nice work!

299

(3 replies, posted in PunBB 1.2 discussion)

Moved to PunBB discussions.

Quaker, you -- and quite possibly others who will post in this topic -- have template tags not native to PunBB, so you ought to write what mods you used to get them.

pedrotuga wrote:

I wouldn't like to make changes in the code because of the updates. I've highly modify the code of a forum that i set up and i keep wondering if i will remember all changes i made when it comes to update.

You can pretty easily just use the hdiff to update a modded forum when a minor version change comes around.