| Author |
 Topic Search  Topic Options
|
Ritchie 
Groupie
Joined: 14 June 2005
Location: Russian Federation
Status: Offline
Points: 91
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: Bug in 7.92?
Posted: 28 July 2005 at 3:36pm |
|
Version 7,9 has been established. After installation of a package of updating (a file http: // zap2.me.uk/7.9_patch.zip) it is impossible to edit messages with nickname Guest. The message on a mistake stands out: Sorry, only members with sufficient permission can access this page. Such mistake at me one or arises at all? Has tried to reinstall a forum. Has established version 7,92. There is precisely same mistake. If to replace a file post_message.asp with an old file from version 7,9 all works correctly. In what the reason?
|
 |
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 29 July 2005 at 6:53am |
|
A Turkish hacker has written some software that will allow people to edit other users posts.
The only way to prevent this is to lock down the editing of posts, as
such this also means that there will be problems with editing some
posts.
As usual this is a problem between functionality and security, and
due to some t**sers out there this is just something that you will have
to live with at present.
|
|
|
|
Ritchie
Groupie
Joined: 14 June 2005
Location: Russian Federation
Status: Offline
Points: 91
|
Post Options
Thanks(0)
Quote Reply
Posted: 29 July 2005 at 10:51am |
Many thanks , -boRg-, for the fast and detailed answer. 
There was one more problem with support by a forum of creation of files and folders with cyrillic names. I wrote about the given problem here  :
Then I have not received the answer to the question. The decision has found itself. It is necessary to change a fragment of a code of a file functions_filters.asp.
Old Code:
'Loop through the extended ASCII characters
For intLoopCounter = 123 to 255
strTextInput = Replace(strTextInput, CHR(intLoopCounter), "", 1, -1, 0)
Next
New Code:
'Loop through the extended ASCII characters
For intLoopCounter = 123 to 191
strTextInput = Replace(strTextInput, CHR(intLoopCounter), "", 1, -1, 0)
Next
After such replacement of mistakes with not cyrillic names of users does not arise.
Taking an opportunity wished to ask, whether you plan to finish a code of a forum for elimination of a similar problem?
|
|
LauraRey
Newbie
Joined: 05 August 2005
Status: Offline
Points: 1
|
Post Options
Thanks(0)
Quote Reply
Posted: 05 August 2005 at 12:18pm |
 -boRg- wrote:
As usual this is a problem between functionality and security, and
due to some t**sers out there this is just something that you will have
to live with at present.
|
I understand....but is this on the list of items to be fixed? And if
so, could you give me an idea of when it might be addressed so I can
pass it on to my clients?
Thanks,
Laura
|
|
ToJaRo
Groupie
Joined: 20 April 2005
Location: United States
Status: Offline
Points: 158
|
Post Options
Thanks(0)
Quote Reply
Posted: 06 August 2005 at 10:04am |
|
I have 7.92 and I am logged in as an Administrator and I cannot edit my
users posts.... In the Forum Admin, Edit Posts is set to 'Registered
Users'. Is this the same problem you mentioned above?
It says: 'Sorry, only members with sufficient permission can access
this page.'
|
|
|
|
rbird
Newbie
Joined: 06 August 2005
Status: Offline
Points: 3
|
Post Options
Thanks(0)
Quote Reply
Posted: 06 August 2005 at 11:00am |
|
I've put the new files in place and reassigned the database to ourside of the web. Everyting seems to work, but I cant post at all. I can register a new person, so the db is found and writeable. any help?
|
|
ToJaRo
Groupie
Joined: 20 April 2005
Location: United States
Status: Offline
Points: 158
|
Post Options
Thanks(0)
Quote Reply
Posted: 06 August 2005 at 12:31pm |
|
|
|
|
|
sfd19
Senior Member
Joined: 20 December 2004
Status: Offline
Points: 263
|
Post Options
Thanks(0)
Quote Reply
Posted: 06 August 2005 at 1:06pm |
Are you sure that you made a correct update, your site says that you are suing Web Wiz version 7.01.
It looks like you did at least not update the two common.asp properly.
|
|
|
|
