Messages posted by: Carbonize

Their config file must be set up correctly as the guestbook is working. Update must also be working as they have a post in the guestbook. Does this error always occur?

If they are getting a PHP error then the path to th document would be included in the report.

I've been in to computers ever since our family had a Sinclair Spectrum 48k. As to programming etc I only got into that about 5 years ago. I am self taught by looking at other peoples code and looking things up on the net.

If you have stats or access to your servers logs just check what IP's access the admin.php file using a POST request. This will be either you logging in, me deleting the post or the hacker when he logged in.

As JTD says anyone can login to your admin section until you patch. Once in you can edit any post and when the admin edits a post they can put HTML tags in there.

No because I deleted it already. You can delete the posts by going into phpMyAdmin if you have it or via your cPanel. Once into your MySQL database you need to goto the table called book_data and then browse it. Simply then click the bin icon next to the row containing the post. The method I just used (which is risky) is to use the tab key to go through the links until I find the first link that says action=del then I press return. The safer option, if you do not have phpMyAdmin is to view the source code, press Ctrl + F to open up the find dialog, type in some of the text from their message so it goes to it, press Ctrl + F again if it is not still open and then type in action=del which should take you to the url used to delete that post. Simply copy that url, replace all the & with just & and then paste it into your url bar and press enter.

Oh and you can get the pre patched session.class.php file from www.carbonize.co.uk/AG/

If you are going to put them within your table then you are best starting your table in header.php and closing it in footer.php. Nesting tables within tables within tables is not recommended practise though. As for the table tags to edit look in body.php, comment.php, form.php and preview.php.

Yay a willing victim. My new installer works fine I'm just adding some error checking to prevent it saying successful when it's not.

I was talking about the align="center" attribute that is in the GUESTBOOKS table tag not the table tag you inserted.

Use the full path for your image instead of relative. The path you have at present is telling it that the folder containing the image is outside the guestbook folder. Use http://www.yourdomain.com etc as the src path. As for the table look in body.php again. In the table tag change align="center" to align="left" or just remove this attribute totally.

Put align="center" to the table tag you added. As for the images I would need to see the guestbook. You sure you got the src path correct?

Sound slike the old base_url problem strikes again. If no base_url is supplied in the config file it tries to work it out and fails ocasionally.

Well if it was working then suddenly stopped did you request a new MySQL password? I guess your MySQL details for that script are in user_config.php.

You could of simply installed the IPB forum and set it to only allow registered users to view the board. Then you just upload the songs as attachments to your posts. If the script is not to large simply email it to me at webmaster@carbonize.co.uk as this sites PM system is disabled.

ps. It is now 06:12 GMT and I am coming to the end of a 12 hour night shift so don't expect anything soon.

At a guess it means you put the wrong information into the admin/config.inc.php file.