1

(36 replies, posted in PunBB 1.2 troubleshooting)

Just chiming in to say I'd also like a one user to many group relationship mechanism (or mod - anyone...?) added - I'm going to go the annoying (and maintenance nightmare) route that lhffan posted.

Thanks - both of your answers helped me resolve these issues!

I'm going to be entering user/password combos in PunBB for my users - some questions:

1. After the first one, I get an error message that says same IP registrations are allowed in intervals of one hour - how do I turn this off?

2. Is their an easy way to disable the user's ability to change or view their own password?

Thanks in advance.

4

(2 replies, posted in PunBB 1.2 troubleshooting)

Hmm dumb mistake - was invoking code that passed the wrong form variables in a related package.

For anyone that cares (and future reference) the default External Applications portlet works perfectly with the variables indicated in the parent post.

Thanks for the replies.

5

(2 replies, posted in PunBB 1.2 troubleshooting)

I'm trying to setup PunBB as an external app for Oracle Portal - I've set:

Login URL: http://myforumpath/login.php?action=in
User Name: req_username
Password: req_password

Auth Type: POST

Additional Fields:

form_sent = 1
redirect_url = index.php
login = Login

When I try it, the page reloads itself an no action is taken - I'm guessing maybe there is a cookie check going on I am not accounting for? Do I need to edit the login.php or some other other page to allow remote POST?

Your thoughts on making this work are appreciated.

Give me peace of mind - I have 1.2.10 installed - from my logs, I noticed someone running an automated query against my forum:

"POST /myforumpath/index.php/profile.php HTTP/1.0"

which returns an unstyled version of the index page - I see the same behavior on this very forum:

http://punbb.org/forums/index.php/profile.php

Is this someone trying to exploit an old vulnerability in PunBB? I can't see any code that could be compromised by a POST request to the page in question... so this didn't seem like a security issue to me - your thoughts?