2.4.2pl8 CHANGES (2006-06-05):
+ CRITICAL UPDATE: phpBB injection update.
+ Updated language file (Thanks to Raven).

phpBB has a sql injection security hole. This update forces all Forums input to go through NukeSentinel's filter system. Get your copy HERE.

icex writes:  

Lightside-x

-Light colored theme
-Matching phpBB forum skin
-Flash navigation buttons in header
-Logo files in psd, gif, jpg and png format
-Header photoshop psd file included
-Compatible with PHP-Nuke versions 7.5 through 7.9

Includes instructions on how to install and edit your theme to fit your personal needs. You can view it at http://icexdesign.com

papamike writes:  

My newest PHP-Nuke theme PMC2 can be viewed live and in action at Papa Mike Creations but you will need to go to Custom-T-Club to download it. The cost is $15 but if you register at Custom-T-Club right now you can cash in on their PROMO and get PMC2 for FREE while their promo last. Better hurry! PMC2 runs on all versions of Nuke, to include version 7.9, Raven Nuke 7.6, and Nuke Evolution.

nukeevangelist writes:  

jmagar.com celebrates good news:

MyHeadlines v4.3.1 is on deck: we have register_globals left to add and a new OPML
import file to create.... It should be done tongiht, or tomorrow. Look for a Monday release!

at jmagar.com you can get code and problem solving capabilities - check out now

nukeevangelist writes:  

TextAds [very powerful] see more at the TextAds SourceForge-Page :: TextAds-project [more info] - well you see this is acutally a pn-scriptaddon but worth to port over! You can get more insights into fully fledged demos - please follow all the links in this article

What are TextAds? TextAds are a simple, polite, and inexpensive alternative to banners and other online advertising.

How do TextAds work? TextAds are inserted into webpages just like any other content. Visitors see a small text box with your link and text similar to the example below:

TextAds is a text ad management system for websites using PHP. It has been deployed with content management systems like PostNuke and should work with any PHP based website.

get more out of it: read more Read More...

TITLE: MySQL Multibyte Encoding SQL Injection Vulnerability

SECUNIA ADVISORY ID: SA20365

VERIFY ADVISORY: http://secunia.com/advisories/20365/

CRITICAL: Moderately critical

IMPACT: Manipulation of data

WHERE: >From remote

SOFTWARE:
MySQL 5.x
http://secunia.com/product/8355/
MySQL 4.x
http://secunia.com/product/404/

DESCRIPTION: A vulnerability has been reported in MySQL, which potentially can be exploited by malicious people to conduct SQL injection attacks. The vulnerability is caused due to an error within the server when parsing a query string that is escaped with the "mysql_real_escape_string()" function. This can potentially be exploited in an environment that uses multi-byte character encoding to bypass SQL injection escaping. The vulnerability is related to: SA20231. The vulnerability has been reported in version 4.1.19 and 5.0.21. Prior versions may also be affected.

SOLUTION: Update to the fixed versions.

MySQL 4.1.x: Update to version 4.1.20.
http://dev.mysql.com/downloads/mysql/4.1.html

MySQL 5.0.x: Update to version 5.0.22.
http://dev.mysql.com/downloads/mysql/5.0.html

MySQL 5.1.x: The vulnerability will be fixed in version 5.1.11. Read More...