Not-Noticeably.net

Skip navigation

74 posts from 2005

CodeGrrl scripts: security flaw

Regarding these scripts and ONLY THESE SCRIPTS:

FA-PHPHosting, PHPCalendar, PHPClique, PHPCurrently, PHPFanBase and PHPQuotes

There is a serious vulnerability that can and has been exploited by hackers if left unsecured. Read this post to find out what you can do.

This does NOT, repeat NOT affect my script, PHPAskIt. Please do not keep contacting me asking which file to replace - PHPAskIt, although a CodeGrrl script, is not based on PHPFanBase like the scripts mentioned above and is therefore not vulnerable to the attack.

Spread the word!

Edit: Ok, so we've removed all scripts available at CG. As I said above, PHPAskIt is not affected by the recent hackings and security vulnerabilities and, just to make doubly sure, I've even updated it slightly. Once CG give me the go ahead, I'll put it up again.

If you're using ANY of the scripts mentioned at the top of this post, do this immediately:

  1. Open up protection.php and add this code to the very top (but underneath the opening <? ):

    if ('protection.php' == basename($_SERVER['SCRIPT_FILENAME']))
    die ('Please do not load this page directly. Thank you.');

  2. Find this line AND DELETE IT:

    $logout_page = "$siteurl";

  3. Find these lines:

    setcookie("logincookie[user]","",time() - 86400);
    include($logout_page);
    exit;

  4. Change them to look like this:

    setcookie("logincookie[user]","",time() - 86400);
    include("login.php");
    exit;

The official fix didn't work for me, which is why I suggest you use this one - it stops hackers from getting to the protection.php file directly, and takes the ability to include any site as $siteurl away. Apply some sort of fix as soon as possible.

Edit #2: PHPAskIt DOES NOT REQUIRE REGISTER_GLOBALS TO BE ON. YOU CAN USE IT WITHOUT ANY PROBLEMS!

Further to my last post...

...I discovered that Firefox 1.5 RC2 has been released. Ha. That wasn't what fixed the background problem, but if I'd have waited it out maybe I wouldn't have had to change anything. Anyway, it's all fixed now so it doesn't matter.

So. I have lots of work to do for uni. 3 presentations, 1 essay and a project for which we have a tutorial on Tuesday. I haven't done much work during my week off, and it's back to class tomorrow. *Sigh* Not looking forward to it. This course is dull.

Firefox 1.5 CSS bugs

9th November 2005 / 19:59

Comments closed

Tagged: Browsers, CSS, Firefox, Geekiness, Internet, Internet Explorer, Opera, Site

I downloaded Firefox 1.5 RC1 on Monday. They've been plugging it for a while on the Firefox download page, and while I did get one of the alpha versions a while back, I stayed with 1.0.x. Now that all my extensions and themes seemed to be compatible, I decided to switch.

Anyway. Since the switch, nothing's really changed... A few new features here and there, otherwise not to different from 1.0.x. But... There seems to be a margin bug in 1.5 that wasn't there before. Example: if you're using FF 1.5, see the bottom of this page (press End to go directly there). See how the background seems to jump slightly to the right? That doesn't happen in any other browser (except IE, but IE can be hacked). So... what to do? I changed the margins of the footer so that the background would match, but then it looks out of place on Opera and Firefox 1.0+. I did search around for some tips, but it seems no one else has picked up on this. *Sigh* I might have to wait for RC2 to come out for this to be fixed... I hope not, since I hate it when my site doesn't look right, but oh well.

Edit: Hmmm, I think I fixed it... I aligned the background all the way to the left instead of the middle, then used a wider left margin. I tested it in IE 6, FF 1.0.7, FF 1.5 and Opera 8.5. Let me know if it still looks wrong to you. :)

Older Entries | Newer Entries