Messages posted by: Auron

Are we talking about the form where you enter the comments?
Or the actual page where you view the comments?

The stuff I wrote will be uploaded tomorrow and i'll post it here.
And i'll probably make this a sticky since its a common question and will have the download like also.

Auron

Thanks, we appreciate it very much!

Carbonize & Auron

I've never heard of adv. poll 203 being hacked before.

There was a site that posted some probs with 202 but I think 203 solved them.
Not sure though, let me know if it happens again, in the meantime keep your poll data backedup a bit more regularly just in case.

You use one or the other.

db for database and textfile for textfile, or were all the data' stored.

I did write a very good install guide but its not online currently and I don't
have it with me to put it back up. But, it will be back up by the end of this week.

Yes, but I can't remember where.

Some one did already do this, so have a search on...

and "return link".

I think it was something like the form tag in the templates you could pre-mod it or something.

some1 else besides me had a dl link for my stuff for adv poll 203.
but you'll have to search the forums for it.

i won't be home to put it back up somewhere until this wednesday.

Change extension to .shtml for the the SSI.
Or to .php for the PHP include.

Install the patch before it happens again is HIGHLY recommended.

Is there anything in the admin area saying how big the file that's being uploaded can be?
Maybe you went over that limit?

Other q's...

Any errors or warnings?
When does it stop working?
How does it stop working?

check the stickies in this forum.

K...

So that page is the page you use in the admin area to create the panel right?

So, all the panel stuff must be stored somewhere.
I'll download it and have a look, I have a feeling it keeps it in the db.
I found some references to the username though.

What is the page called that actually contains the poll?

Could you post some code?

Like the code from the page that includes the poll?
I need the page with all the PHP code not the outputted HTML code.

You could add some stuff to the poll files to add the user' username to the poll db. It wouldn't be that bad really. I would just need to get the username into a variable that I can then use to pass to the poll script which then writes it to the db. Maybe I can work on it next week when i'm back home for you.

Auron

ET wrote:

Auron wrote:
one of the exploits of gb 2.3.1 was that they could access other files on the server, for example change some of the gb files like config.php etc.

Thanks for helping me understand better. Appreciated

np, the thread where carb talked about is around here.
maybe in the stickies? not sure though.