phpBB 2.0.22 update for IntegraMOD 1.4.0

[IntegraTeam]

This package updates IntegraMOD 1.4.0 from phpBB 2.0.21 to 2.0.22.

Included in the package are both the manual install instructions and the premodded files. The manual install instructions should be used if you have modified your board files using other MOD instructions and do not wish to undo the file edits from said MOD. Use the premodded files if you have not modified your board files.

[url=http]Download[/url]

Please direct any question or comments regarding this update to this thread.

Thanks,
The IntegraMOD Team <img>

[Demonicpagan]

to me, this seems a bit incomplete:

Code: Select all

 ##-----[ FIND ]---------------------------------------------# Line 1665     //     // Start error handling     //     if ($error)     {  

because after that, it says

Code: Select all

 # #-----[ OPEN ]--------------------------------------------- # login.php  

[Teelk]

You're correct.

It should be...

Code: Select all

##-----[ FIND ]---------------------------------------------# Line 1665     //     // Start error handling     //     if ($error)     {  ##-----[ AFTER, ADD ]---------------------------------------------#         $privmsg_message = htmlspecialchars($privmsg_message);  

The download has been updated.

[Vadar]

Pre-modded upgrade was easy and appears to work great. Thanks Teelk!!

[found it]

Hi

This needs to be added to functions.php in the premodded files....

security fix

Code: Select all

 // Security update 28/08/06 M  $pass = 0;  if($phpbb_root_path == './' || $phpbb_root_path == '../' || $phpbb_root_path == './../' || $phpbb_root_path == ''  || $phpbb_root_path == ' ') $pass=1;  if(strlen($phpbb_root_path) > 5) $pass=0;    if($pass == 0)  {     die('Hacking attempt... Details Logged');     exit;  }// Hack Fixes  280806 //

[tekguru]

Found it - any particular place?

[found it]

Hi yes sorry

place it above this bit of code in includes/functions.php

[code]//-- mod ]

[Demonicpagan]

Does anyone else get this when they log into the admin panel?

phpBB Security Status
Sorry, I was unable to get version data at this time. Please try later.

[Teelk]

Does anyone else get this when they log into the admin panel?

phpBB Security Status
Sorry, I was unable to get version data at this time. Please try later.

You're getting that message because phpbb-tweaks.com is more or less down. There's nothing installed there at the moment anyway.

The premodded includes/functions.php file has been changed to add the security fix, thanks Found It.

If you used the premodded files please add the fix to your functions.php. Even if you didn't use the premodded files I suggest checking to see if that code exists, if not then it should be added.

[obiku]

You're correct.

It should be...

Code: Select all

##-----[ FIND ]---------------------------------------------# Line 1665     //     // Start error handling     //     if ($error)     {  ##-----[ AFTER, ADD ]---------------------------------------------#         $privmsg_message = htmlspecialchars($privmsg_message);  

The download has been updated.

What will this part do....
Because if I understand it right, the variable $privmsg_message doesn't do anything because of the message_die what is right after that line?

Hope I make sence

[found it]

The premodded includes/functions.php file has been changed to add the security fix, thanks Found It.

more than welcome

[Teelk]

You're correct.

It should be...

Code: Select all

##-----[ FIND ]---------------------------------------------# Line 1665     //     // Start error handling     //     if ($error)     {  ##-----[ AFTER, ADD ]---------------------------------------------#         $privmsg_message = htmlspecialchars($privmsg_message);  

The download has been updated.

What will this part do....
Because if I understand it right, the variable $privmsg_message doesn't do anything because of the message_die what is right after that line?

Hope I make sence

You're correct, that line won't do anything.

In a vanilla phpBB board when an error message is displayed in private messages the private message post is displayed again below it. That line would strip the html special characters from the posting box. With PCP only the error message is displayed and you must hit back in your browser to submit another private message.

Because all edits to privmsg.php in a phpBB update have to be done to profilcp/profilcp_privmsg.php, I thought it was best to leave that edit in for FIND statements in future updates.

[ayasha]

is the text file for modding the files up to date in this download? or would i have to grab those extras from this thread?

[Teelk]

All up to date Cleo.

[ayasha]

thanks <img>