block-Ephemerids

Dawg · Posted: Sun Mar 28, 2004 5:21 am

I installed the 6.9 security update package from here last night.

After installing my block-Ephemerids when back to it's jumbled ways....

So I screwed around with it to get it to work correctly. I thought I would paste it here for Raven to look at. If is is still secure you might want to include it in the update because this one works correctly.

Code:

<?php

/************************************************************************/
/* PHP-NUKE: Web Portal System */
/* =========================== */
/* */
/* Copyright (c) 2002 by Francisco Burzi */
/* http://phpnuke.org */
/* */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License. */
/************************************************************************/
/* Additional security & Abstraction layer conversion */
/* 2003 chatserv */
/* http://www.nukefixes.com -- http://www.nukeresources.com */
/************************************************************************/

if (eregi("block-Ephemerids.php",$_SERVER['PHP_SELF'])) {
Header("Location: index.php");
die();
}

global $prefix, $multilingual, $currentlang, $db;

if ($multilingual == 1) {
$querylang = "AND elanguage='$currentlang'";
} else {
$querylang = "";
}

$today = getdate();
$eday = $today[mday];
$emonth = $today[mon];
$title = ""._EPHEMERIDS."";
$content = ""._ONEDAY." ";
$result = $db->sql_query("SELECT yid, content FROM " . $prefix . "_ephem WHERE did='$eday' AND mid='$emonth' ORDER BY yid $querylang");
while ($row = $db->sql_fetchrow($result)) {
$yid = intval($row['yid']);
$econtent = stripslashes($row['content']);
if ($cnt == 1) {
$boxstuff .= " ";
}
$content .= "$row[yid] ";
$content .= "$row[content] ";
$cnt = 1;
}
?>

What is changed....

ORDER BY yid

and

$content .= "$row[yid] ";
$content .= "$row[content] ";
$cnt = 1;
}

Raven · Posted: Mon Mar 29, 2004 2:31 pm

I don't (and never have) use this module. I appreciate your contribution though and hopefully someone who uses it might take a look. I don't see any issues by just glancing at the code though.