If you are not registered or logged in, you may still use these forums but with limited features. Show recent topics
  [Search] Search   [Hottest Topics] Hottest Topics   [Members]  Member Listing   [FAQ]  FAQ 
[Register] Register / 
[Login] Login 
Messages posted by: Carbonize
Forum Index » Profile for Carbonize » Messages posted by Carbonize
Author Message
whoops forgot all about this Did you get it working?
OK I have fixed this in 2.3.2. Now the smilies you see on the addentry page are pulled from a template if smilies are turned on. This is only temporary as I am going to write a function whereby if you have smilies switched on it will display the first 12 smilies you actually have in your smilies list as the present method kind of sucks.
I suppose I could of gone for the simpler option (which I have in 2.3.2 (temp name)) of renaming the action variable instead. Far less changes to make then and the same in both versions I believe.
Fixed cheers.
Missed the cross site exploit fix.
How do you know it was this exploit used?
Yes as ET just pointed out, and as Amber has mentioned in previous threads, the emoticons on the add entry page are hard coded into the HTML for some bizarre reason. So even if you don't allow emoticons or just remove the codes for the ones on the page they are still displayed. Wonder if I could write a simple mod to go in 2.3.2 for this, can't be that hard.
If you opt to use MySQL may I recommend a script called SilverCounter. I used it once and found simple to use.
To put it another way feel free to edit the footer.php to better suit your site but please leave a credit of some description to the author.
At present the only way to edit comments is via phpMyAdmin or similar. I'll add it to my things I may possibly do list although at present it's looking like 2.3.2 will be my last major work on Advanced Guestbook.
Thats the thing about exploits. You sometimes don't realise they exist until they are used on you.
The customisation on that site is simple to achieve. I would advise against trying to customise the guestbook in Frontpage and use a text editor such as notepad or PS Pad to edit the templates. This of course requires some knowledge of HTML. If you look in the second sticky of this forum there is a link to changing the gustboks image/logo and in he same file (body.php) you should find where the top links are.
Depends on what you mean by customise the guestbook. If you are talking about the look then thats all controlled via the templates (well mostly controlled via them) if you mean adding features then thats different. Read the second thread in this forum as it contains a lot of useful links.
The txt in question can be found in templates/footer.php but given that the guestbook is free I'm sure the author would prefer if you left a link back to this site.
The timestamp needs to be put directly into the MySQL entry for tha post. I'll write something on it later if I get chance.
<form action=" ? thats what usually tells the form where to submit the data to.
 
Forum Index » Profile for Carbonize » Messages posted by Carbonize
Go to:   
Based on the open source JForum