Messages posted by: Carbonize

Wel if you haven't patched the exploit you can alway slog in using it. If you have patched simply restore the old session.class.php and use the exploit.

Yup thats basically the jist of it.

Yes as admin you can put anything you want in the entry even HTML. The script deals with any HTML tags and AGcode in a post when it is submitted.I assume you have access to your admin again? If you do then I recommmend looking in this forum for my fix for this exploit.

A link would be useful. Are you using Advanced Guestbook 2.2 or 2.3.1?

Sorry but I don't speak German.

If you are using Advanced Guestbok 2.2 then you are at risk from an SQL Injection exploit. In this case you will find the fix at http://proxy2.de/forum/viewtopic.php?t=3650

NeoisD1 wrote:Hi Folks

forgive my lack of experience but can I embed the guest book into my web html page? If so what is the easiest and or recommended method?

TIA

The recommended method is to use the search feature of the forum to find all the other threads about doing this.

Sounds like bad karma.

Didn't I just say that?

by giving a file the .php extension you are telling the server to pass it to the PHP processor before sending it to the browser. The processor then looks for anything between <?php and ?>. The templates in the guestbook are turned into strings by the guestbook and so the templates are never sent to the processor. To put some php into the templates you will have to do the PHP in the script and have th results turned into a variable which you can then place in the template.

I believe the daily counter uses flat files. Do a search for silvercounter if you want a DB based one. I have used Silvercounter myself and it's very good.

Off the top of my head gb_image is the uploaded image.

The entries can be found in the table called book_data. Simply locate the offending entry (it will be the last I guess) and delete it.

If you have access to the SQL tables via the Cpanel or phpMyAdmin then you can manually delete the entries.

Could be a malformed url. As I said if I could have a look I could possibly fix it.

Oh and Amber meant reupload ALL the lib files.