The secure CMS.
Resources
Topics
- Home
- Development (314)
- Geeklog (209)
- Plugins (108)
- Themes (5)
- News (387)
- Announcements (248)
- Geeklog.net (31)
- Security (76)
- Spam (11)
- Summer of Code (28)
User Functions
Events
What's New
Stories
No new storiesComments last 2 weeks
Trackbacks last 2 weeks
No new trackback commentsLinks last 2 weeks
No recent new linksNEW FILES last 14 days
No new filesWelcome to Geeklog Wednesday, June 19 2013 @ 10:39 AM EDT
Geeklog 1.3.11sr1 and 1.3.9sr4
- Sunday, July 03 2005 @ 04:11 PM EDT
-
- Contributed by:
- Dirk
-
- Views:
- 10,134
Stefan Esser has found an SQL injection vulnerability in Geeklog that can, under certain circumstances, be used to extract sensitive user data such as a user's password hash. We are therefore releasing security updates to address this issue and would advise you to upgrade ASAP.
There are upgrade archives available to upgrade from Geeklog 1.3.11 and Geeklog 1.3.9sr3, as well as a complete tarball for Geeklog 1.3.11sr1 (for new installations).
Users of Geeklog 1.3.10 please read on ...
As mentioned in the release announcement for Geeklog 1.3.11, there will be no further development for Geeklog 1.3.10. Consequentially, we are not releasing this security upgrade for 1.3.10. While it would be easy to provide such an upgrade, it would be pointless as 1.3.11 was itself a security upgrade for 1.3.10. So fixing this security issue would still leave you vulnerable to the issues with 1.3.10. You had over half a year to upgrade to 1.3.11 and if you still haven't done so, now would be a good time ... Use the 1.3.11sr1 tarball and go through all the usual upgrade steps. As mentioned before, the upgrade should be relatively painless as there were no changes in the themes and config.php from 1.3.10 to 1.3.11.
The following comments are owned by whomever posted them. This site is not responsible for what they say.
---
GameFaction - For All Your Gaming Needs
Edited new lib-common.php file to correct path and Parse erro on line 4691
New file line:
}
else if( $A['type'] ']']']']== ']']']']==']']']==']']==']=='poll' )
{
Original File line:
}
else if( $A['type'] ']']== ']']==']=='poll' )
{
Looks odd to me
---
You are limited only by your imagination...
Yes, that's a typical case of a corrupted lib-common.php.
bye, Dirk
was fine, but then noticed that the forum plugin no longer works. The
list of forums appears, but clicking on any of the forums in the list just
reloads the page. If I go to the forum admin page and attempt to click
on any listed post I get a Topic deleted? error. I think perms are all OK,
what else can I check?
the folder I archived. The geeklog version is listed as 1.3.8 in the
admin/plugins window.
get around the register_globals setting, and so when I replaced lib-
common.php with the updated version, the reg_globals hack was not
there anymore, and so the forum didn't function anymore. I guess I didn't
check things out as thoroughly as I thought. Boy, that'll be nice in GL2 to
not have to worry about the Reg Globals thing...
CVS diff
bye, Dirk
file, but the GL Version Test still shows 1.3.11, no "sr1" -- I am assuming
that normal?
Carefully read the included ReadMe again ...
bye, Dirk
I must have gotten ahead of myself or something. I edited my
config.php as instructed in the Read Me and all is well with the version
number. Thanks once more.
Warning: main(lib-common.php): failed to open stream: No such file or directory in /my/path/tol/geeklog/index.php on line 37
Fatal error: main(): Failed opening required 'lib-common.php' (include_path='.:/usr/lib/php') in /my/path/tol/geeklong/index.php on line 37
... where /my/path/tol/geeklong/ has been substituted for my actual working path.
Any idea where I might be going wrong?
---
Suspensewriter :: Writing: it's just one damned word after another
Well, the error message pretty much says it all: It can't find the lib-common.php.
Either it's really missing or the permissions on the file are such that the webserver can't read it (that sounds a bit odd, though).
bye, Dirk
Do I see geeklong instead of geeklog..?
---
www.beeweb.nl
require_once( '/home/thebluem/www/config.php' );
Warning: Cannot modify header information - headers already sent by (output started at /home/thebluem/www/config.php:1) in /home/thebluem/www/system/lib-sessions.php on line 188
Warning: Cannot modify header information - headers already sent by (output started at /home/thebluem/www/config.php:1) in /home/thebluem/www/system/lib-sessions.php on line 200
Anyone know what I've done wrong?
Cannot modify header information - headers already sent by ...
---
www.beeweb.nl * www.kampeerzaken.nl * www.watersporters.info * www.outdoormania.nl
---
DubiousProfundity.com:
Dubious Wisdom for Dubious Times...
do things have to be more complicate than simple zip files?
i am new to all this. i have been here for days, but i have not come across a sigple posting that tells a novice how to get the geeklog on his/her site in a simple and comprehensive way.
Try Alternative installation instructions then.
And if you have any actual questions, please post them in the forum, not as a comment to some unrelated story. Thanks.
bye, Dirk