The secure CMS.

Welcome to Geeklog, Anonymous Friday, November 08 2024 @ 08:41 pm EST

Geeklog Forums

FileMgmt 1.5.2 Date Hack

 New Topic  Post Reply
 11/02/06 01:56pm (Read 2,003 times)  
Status: Banned

gtgillis

Forum User
Full Member
Registered: 11/05/03
Posts: 121
FileMgmt Plugin Hack

This will allow you to edit the date that the file was submitted.


Edit /plugins/filemgmt/language/english.php
- Insert on line 171 -
Text Formatted Code
define("_MD_EDITDATE","Submit Date:");



Edit /public_html/admin/plugins/filemgmt/index.php

Search for this -
Text Formatted Code
$result = DB_query("SELECT cid, title, url, homepage, version, size, logourl, comments FROM {$_FM_TABLES['filemgmt_filedetail']} WHERE lid='$lid'");


Change to this -
Text Formatted Code
$result = DB_query("SELECT cid, title, url, homepage, version, size, date, logourl, comments FROM {$_FM_TABLES['filemgmt_filedetail']} WHERE lid='$lid'");


=======================================================================================================================

Search for this -
Text Formatted Code
list($cid, $title, $url, $homepage, $version, $size, $logourl,$comments) = DB_fetchARRAY($result);


Change to this -
Text Formatted Code
list($cid, $title, $url, $homepage, $version, $size, $date, $logourl, $comments) = DB_fetchARRAY($result);


=======================================================================================================================

Search for this -
Text Formatted Code
$size = $myts->makeTboxData4Edit($size);
        $logourl = rawurldecode($myts->makeTboxData4Edit($logourl));


Change to this -
Text Formatted Code
$size = $myts->makeTboxData4Edit($size);
        $date = $myts->makeTboxData4Edit($date);
        $logourl = rawurldecode($myts->makeTboxData4Edit($logourl));


=======================================================================================================================

Search for this -
Text Formatted Code
$display .= /'<tr><td>/'._MD_FILESIZEC./'</td><td colspan="2"><input type="text" name=size value="/'.$size./'" size="10" maxlength="20"></input> /'._MD_BYTES./'</td></tr>/' .LB;
    $display .= /'<tr><td valign="top">/'._MD_DESCRIPTIONC./'</td><td colspan="2"><textarea name="description" cols="55" rows="10">/'.$description./'</textarea></td></tr>/' .LB;


Change to this -
Text Formatted Code
$display .= '<tr><td>'._MD_FILESIZEC.'</td><td colspan="2"><input type="text" name=size value="'.$size.'" size="10" maxlength="20"></input> '._MD_BYTES.'</td></tr>' .LB;
    $display .= '<tr><td>'._MD_EDITDATE.'</td><td colspan="2"><input type="text" name=date value="'.date("m/d/y", $date).'" size="10" maxlength="20"></input></td></tr>' .LB;
    $display .= '<tr><td valign="top">'._MD_DESCRIPTIONC.'</td><td colspan="2"><textarea name="description" cols="55" rows="10">'.$description.'</textarea></td></tr>' .LB;


=======================================================================================================================

Search for this -
Text Formatted Code
$size = $myts->makeTboxData4Save($_POST['size']);
    $description = $myts->makeTareaData4Save($_POST['description']);


Change to this -
Text Formatted Code
$size = $myts->makeTboxData4Save($_POST['size']);
        $editdate = $myts->makeTboxData4Save($_POST['date']);
    $description = $myts->makeTareaData4Save($_POST['description']);



=======================================================================================================================

Search for this -
Text Formatted Code
DB_query("UPDATE {$_FM_TABLES['filemgmt_filedetail']} SET cid='$cid', title='$title', url='$url', homepage='$homepage', version='$version', size='$size', status=1, date=".time().", comments='$commentoption' WHERE lid='{$_POST['lid']}'");


Change to this -
Text Formatted Code
DB_query("UPDATE {$_FM_TABLES['filemgmt_filedetail']} SET cid='$cid', title='$title', url='$url', homepage='$homepage', version='$version', size='$size', status=1, date=".strtotime($editdate).", comments='$commentoption' WHERE lid='{$_POST['lid']}'");


=======================================================================================================================
 Quote
 11/02/06 02:41pm  
Status: offline

jmucchiello

Forum User
Full Member
Registered: 08/29/05
Posts: 985
Quote by gtgillis:
$result = DB_query("SELECT cid, title, url, homepage, version, size, date, logourl, comments FROM {$_FM_TABLES['filemgmt_filedetail']} WHERE lid='$lid'");
=======================================================================================================================
list($cid, $title, $url, $homepage, $version, $size, $logourl,$date, $comments) = DB_fetchARRAY($result);

Be aware that the date and logourl fields don't line up in these two lines.
 Quote
 11/03/06 07:09am  
Status: Banned

gtgillis

Forum User
Full Member
Registered: 11/05/03
Posts: 121
I revised the code so they line up.

In case anyone was wondering why I posted the code in text mode it's because there is a glitch when I post in HTML that messes with the forum edit entry screen. Bug?
 Quote
 New Topic  Post Reply
All times are EST. The time is now 08:41 pm.
  • Normal Topic
  • Sticky Topic
  • Locked Topic
  • New Post
  • Sticky Topic W/ New Post
  • Locked Topic W/ New Post
  •  View Anonymous Posts
  •  Able to post
  •  Filtered HTML Allowed
  •  Censored Content