Page Index Toggle Pages: 1 2 [3] 4 5  Send TopicPrint
Very Hot Topic (More than 25 Replies) Security Issue! (Read 20326 times)
KyleYankan
Senior Member
****
Offline


The KyleYCam!

Posts: 341
Joined: Dec 25th, 2001
Gender: Male
Re: Security Issue!
Reply #30 - Jan 13th, 2002 at 11:57pm
Print Post  
Fixed, thanx omario Tongue
  


//-KyleY-\\

Steal his bandwidth! He doesn't want it!
Back to top
IP Logged
 
Administrator
Forum Administrator
*****
Offline


Yummm

Posts: 7
Location: Modders Rile
Joined: Oct 7th, 2014
Gender: Male
Re: Security Issue!
Reply #31 - Jan 14th, 2002 at 12:33am
Print Post  
Quote:
Anyone know if the signature file is statically posted, or does it update on view
it is not statically posted, it is generated like the normal posts...

Kyle, how did you fix your signature?
  

The Administrator.
Back to top
WWW  
IP Logged
 
KyleYankan
Senior Member
****
Offline


The KyleYCam!

Posts: 341
Joined: Dec 25th, 2001
Gender: Male
Re: Security Issue!
Reply #32 - Jan 14th, 2002 at 12:39am
Print Post  
I did the same thing i did to my board after i instaleld the security mod, I just took the http:// out
  


//-KyleY-\\

Steal his bandwidth! He doesn't want it!
Back to top
IP Logged
 
Administrator
Forum Administrator
*****
Offline


Yummm

Posts: 7
Location: Modders Rile
Joined: Oct 7th, 2014
Gender: Male
Re: Security Issue!
Reply #33 - Jan 14th, 2002 at 1:18am
Print Post  
I'm working with Corey to get this fixed but there are still some really strange behaviours right now...
http://yabb.xnull.com/community/?board=test;action=display;num=1010949172;start=...
  

The Administrator.
Back to top
WWW  
IP Logged
 
KyleYankan
Senior Member
****
Offline


The KyleYCam!

Posts: 341
Joined: Dec 25th, 2001
Gender: Male
Re: Security Issue!
Reply #34 - Jan 14th, 2002 at 1:32am
Print Post  
thanx for the linker. Does anyone know how this bug worked? I really would like to know. A couple peope keep asking me.
  


//-KyleY-\\

Steal his bandwidth! He doesn't want it!
Back to top
IP Logged
 
memobug
Full Member
***
Offline


I love Bonsai!

Posts: 135
Joined: Aug 30th, 2001
Re: Security Issue!
Reply #35 - Jan 14th, 2002 at 1:39am
Print Post  
Could someone tell me if this security patch is only affecting the interpretation of the UBB code, or does it go in and try to change the actual message content?

I just installed 1.2 and I am having difficulty now with an inline smiley someone posted from their site a few weeks ago.  After installing patch 1.2 I don't get the image, just the UBB tags.

I haven't tried reposting the image.  I'll do that here

lates, hack (a clip joint does sound a lot better than a hack job)

See if it previews!  
Previews Okay.  See if it posts right

No it just dumps UBB code.  I'm afraid 1.2 is still buggy.

Regards,

Matt
  
Back to top
WWW  
IP Logged
 
Administrator
Forum Administrator
*****
Offline


Yummm

Posts: 7
Location: Modders Rile
Joined: Oct 7th, 2014
Gender: Male
Re: Security Issue!
Reply #36 - Jan 14th, 2002 at 2:23am
Print Post  
Don't worry, the patch doesn't edit your posts, it just displays it different (and at the moment still bugy). All I can say is that it has todo with the autolink feature (try turning it off) and that we're working on it...
  

The Administrator.
Back to top
WWW  
IP Logged
 
Brainy
Guest


Re: Security Issue!
Reply #37 - Jan 14th, 2002 at 4:28am
Print Post  
Donno if this will help or if its useless info. Gonna post it anyway.

I tried turning off auto URL's.

Before I turned it off I was getting the dreaded red "x" box followed by the url and 'alt="" border="0">'. When I checked properties of the red "x" box, I saw a perfectly good URL.

Now that I have auto URL turned off, I just get the red "x" box. When checking properties, the URL has a double "http://". Seems the new code may be putting "http://" in twice and causing the problem.

Im no coder, so if this is useless babbling, just tell me to shut up. Tongue
  
Back to top
 
IP Logged
 
wang
Guest


Re: Security Issue!
Reply #38 - Jan 14th, 2002 at 6:13am
Print Post  
[td]te [/td][tr]st[/tr]
  
Back to top
 
IP Logged
 
XxFR666xX
Junior Member
**
Offline


I Love yabb so much i
sold my soul for them

Posts: 95
Joined: Dec 22nd, 2001
Gender: Male
Re: Security Issue!
Reply #39 - Jan 14th, 2002 at 1:08pm
Print Post  
do we need this!!! or is this just another mod to use?? or does it protect your board or is it jsut more problems?

  

I_Am_Canadian
-=G.o.d=- Network
Creator/Webmaster/Co-Owner
webmaster@goddc.net
http://www.goddc.net
Back to top
IP Logged
 
itswheelie
Senior Member
****
Offline


I love YaBB 1 Gold!

Posts: 445
Joined: May 30th, 2001
Re: Security Issue!
Reply #40 - Jan 14th, 2002 at 1:21pm
Print Post  
well after watching my mate hack my board with the security leak in such a short time and so easily, then yes you do need it.

Sure at the moment it isn't perfect it has some bugs but until they get them sorted out they are bearable.

from what I've seen, 1.2 seems to create more problems than 1.1 so I am sticking with 1.1

It seems to work but has problems.  Images that do NOT have www in their path eg  itswheelie.homestead.com/files/score.jpg must be posted between the [img] tags with no http:// as the security mod inserts the http://  however an image with www in the path eg www.angelfire.com/itswheelie can be displayed with the [img] tags using http:// eg http://www.angelfire.com/itswheelie/ and it will display just fine.

One other bug is that you are limited to one image per post (not including the sig).

Multiple images all appear exactly the same as the first image Sad
  
Back to top
 
IP Logged
 
Cvm
Junior Member
**
Offline



Posts: 74
Location: Melbourne
Joined: Nov 11th, 2001
Gender: Male
Re: Security Issue!
Reply #41 - Jan 14th, 2002 at 6:18pm
Print Post  
I'm using security fix 1.1 and advanced UBBC.js.

I just found something interesting that might help you debug this problem.

When you place the image in your post and click on POST it displays incorrectly on the forum. Example http://www.domain.com/images/logo.jpg" alt="" border="0">

But when you click PREVIEW first, followed by POST, the image displays correctly. (Both http:// and WWW URL's)

Hope this information helps.

  
Back to top
WWW  
IP Logged
 
Deskdirect
Senior Member
****
Offline


"Living Drama Free!"

Posts: 498
Joined: Jul 1st, 2001
Re: Security Issue!
Reply #42 - Jan 14th, 2002 at 10:52pm
Print Post  
I'm trying to keep up with the information being posted in this thread but some of it just hasn't sunk in. I went to my sig and changed by removing the http:// and it works fine. Images in posts show up after I make the same changes but its impossible for me to make this change throughout my entire forum. Is the security patch ( I assume you're working on a fix) the sole cause of these broken images? And, is there anything we can do NOW as a workaround that doesn't leave our forums exposed to hackers?
  

Classic Rock Rocks!
http://www.mitchryder.com
Back to top
 
IP Logged
 
Administrator
Forum Administrator
*****
Offline


Yummm

Posts: 7
Location: Modders Rile
Joined: Oct 7th, 2014
Gender: Male
Re: Security Issue!
Reply #43 - Jan 14th, 2002 at 11:04pm
Print Post  
I almost got it, when the new patch is out you will just have to uninstall the old one and install the new. You'll not have to repair all your images, this is just a display problem v1.2 causes...
  

The Administrator.
Back to top
WWW  
IP Logged
 
Administrator
Forum Administrator
*****
Offline


Yummm

Posts: 7
Location: Modders Rile
Joined: Oct 7th, 2014
Gender: Male
Re: Security Issue!
Reply #44 - Jan 15th, 2002 at 12:29am
Print Post  
Ok I think I got it... finally 8)
redownload dudes any you should be happy Grin
  

The Administrator.
Back to top
WWW  
IP Logged
 
Page Index Toggle Pages: 1 2 [3] 4 5 
Send TopicPrint