Messages posted by: Auron

Doesn't your CMS have a builtin poll system?

And no I have no idea how to do it, what CMS are you using?

ET wrote:

Auron wrote:
reuploading files doesn't matter since all the entries are stored in the db.
its just a case of fixing the smilie tags/whatever, and removing the offending entry/ies.

Auron - help me with the thinking here - how does loading the templates, etc, change the smilie tags and remove the offending entry? If I don't understand the thinking behind this, others may not understand it either....

one of the exploits of gb 2.3.1 was that they could access other files on the server, for example change some of the gb files like config.php etc.

ET wrote:Auron and I posted about the same time - I would hold off actually uploading the gb again until you try the following

Okay - the only other way to delete the post then is to go into your MySQL tables thru your Website's control panel (most use CPanel) -

You will need to open the SQL tables for the guestbook - Some call it "MySQL Databases" or "MySQL Tools" while others call it "phpMyAdmin" -

Look for the AGBook's tables to open then look inside that for "book_data"

Once you open up book_data, you may need to click on "Browse" to find the list of table entries for your guestbook - you should be able to delete that one particular entry from there.

Some hackers have found a workaround within 2.3.1 that allows them to insert javascript codes, meta tags and redirects... I won't explain how it is done, but suffice it to say, I've found that making certain words "forbidden" helps. for example, they used the smilies to enforce a redirect on your guestbook height="15">nt="10;URL=http://www.cia.gov">

Good luck - and let us know if you need more help.

reuploading files doesn't matter since all the entries are stored in the db.
its just a case of fixing the smilie tags/whatever, and removing the offending entry/ies.

Re-upload all the gb files again overwriting the ones there.
Make backups of your templates before that.
Re-upload original templates. Make modifications to the templates again.
Look at the stickies in the support forum on how to patch your gb.

zorglub wrote:well well..

/* last poll, since poll_id won't be set since you always want the newest poll you can do this... */ $poll_id = $php_poll->get_latest_poll_id();

isn't working

and

<form method="post" action="$this->form_forward?poll_id=$poll_id">

isto make so that the comment is posted to the proper poll...

makbe I could have done better... But this code is too complicate for me

Okay i get the poll comment form.

btw, your supposed to use that code instead of the if bit not the whole thing.

You could shorten a bit...

What does the last bit of code do exactly?

Forwards back to the poll and skips the results?

Carbonize wrote:If they are getting a PHP error then the path to th document would be included in the report.

Its a 500 Internal Server error, so its not PHP then.
Could be the path though...

Are there any other pathes to set?

zorglub wrote:how to diplay the comments and the comments forms like for demo_4 ??

look at the demo polls and look at the code next to them.

Anonymous wrote:$php_poll->set_template_set("popup");
echo $php_poll->poll_process("newest");

That should work.

Have a look at the demo polls on this site by...

Free Scritps -> Adv. Poll Demo -> look at polls AND the code.

Warning! Do not install either of the gustbooks or the poll from proxy2.de thru cpanel!
They will either screw them up or take up to much disk space (why? no idea).

Download them from here and install yourself.

I don't know how cPanel can sell its software bundled with free software.
Even though proxy2.de stuff is opensource (i think).

So what are you trying to do exactly?

Just show the newest poll?

Just a quick add-on about the beta gb.

I'll be be able to test it next week when i'm back home.

Carbonize wrote:Actually ignore my comment about the username above. If you change the username when you change the password on the password page both will be changed.

Same thing applies to the poll if I remember correctly.

Carbonize wrote:I think for #2 you mean use General Discussion

< f i x e d >