Search found 88 matches

Forgot to mention...

There are a couple or three issues I ran up against in using CKEditor, and here are the fixes:

There is white space or indenting after the paragraph tag. To remove it ckedit ...

Below is the code I use in my PHP Nuke fork. This should be enough to convert to RN. The biggest change is probably replacing $context with is_user() or is_admin()

// CKEditor code for text edit ...

CKEditor 3.6.4 is the current version I think...

Here is a link that shows how to include an upload function:

http://www.mixedwaves.com/2010/02/integrating-fckeditor-filemanager-in-ckeditor/

...

Here is what I use in my "fork":

// GraphicAdmin();
OpenTable();
echo '<div class="titlebox"><a href="admin.php">', _GOTOADMINMENU ,'</a>&l ...

In my 50 yrs. on God's green earth I have learned that one cannot be everything for everyone, whether it is personalities, business, and especially software. lol. I know support sites are filled ...

That vulnerability is to the bridge between Mambo/Joomla and SMF for syncing members/users table. That was not anything to do with the SMF code....

http://milw0rm.com/exploits/2021

It is simi ...

Message to all:

I am not promoting or pushing for the entire Nuke community to use that Input Filter. I found it in my search to address the check_html and stripslash issue in the Patch files. Fo ...

Gremmie... I may have been doing something wrong, but I tried many variations to get "things" to globally recognize the $myFilter. Every --d***-- thing I tried just would not work. If someone could ...

evaders....... Where have you seen or read or whatever on any security issues with SMF? I have not seen anything posted..... I am not sure I like the stripslashes, etc. in SMF, but it appears to be ...

Montego.... Interesting point about what to do about certain things.... There is an easy fix for that.... Create a standard block instead of creating from within the blocks admin section. I gu ...

well.... I just could not get anything to work with using the one class file but somehow have one function for allowable html tags and one for allow zero tags..... hence I just added the god-awful ...

Look at the topic about Filtering.... Earlier I posted some code for an Input Filtering system, which is basically what you are needing. This system covers what you are asking.

Database inputs sh ...

***EDITED***

Discussion seems to have stopped for a bit, so I will bring up some things to consider....

Here is what I am now doing for my nuke fork:

I have replaced all the addslashes, strip ...

The password needs to be encrypted before it is placed in the file.

I wondered when Sentinel would be brought up....

Will all of Sentinel be needed if there is input filtering and proper escaping?

...interesting thoughts ahead.....

Here is a link to an Input Filter class system:

http://www.cyberai.com/inputfilter/

You can download it from the Resources drop down box.

Part of the filtering includes these 3 functions:

...

Coding Standards is more what I'm going for. How do we filter variables? Do we use some pre-existing setup or make our own.

This is the discussion.

- Evaders99

--------------------------- ...

Here are some debating issue links on addslashes vs. mysql_real_escape_string:

Chris Shiflett--
http://shiflett.org/archive/184

Ilia Alshanetsky--
http://ilia.ws/archives/103-mysql_real_esca ...

Looking to the future, I would think bypassing magic_qoutes_gpc would be the option since it has been reported to be deprecated in PHP 6. Creating some kind of function that tests for magic_quotes_gp ...

montego.... I thought RavenNuke would evolve in that direction. The one part I left out of "the mission" was merging SMF (Simple Machines Forums) into Nuke, or vice versa. This means removing nuke_ ...

lol.... I am not a coder per se, but I have modified a bunch.... For the above function I took pieces from 3 or 4 different places, and put them all together.

Yes, making code secure so one does ...

OK

I revised my escape function. Now it tests if magic_quotes_gpc is on, verifies which php version is used, makes sure leading zeros are not deleted, and does the mysql_real_es ...

http://shiflett.org

I got the concept of Filter Inputs, Escape Outputs from his website. And I will be going to the bookstore today. lol....

I had not heard about the "Pro" version..... ...

I am trying to get my head around db inputs/db outputs and SQL Injection in the PHP Nuke code (not worried about phpBB). My goal is to get around having to use addslashes and stripslashes everywhere. ...

Thanks for the code darklord! ...just wanted to make sure.

ahhhhh yes.... great point about links, etc.

Hmmmmm.... It would appear then that one cannot totally eliminate all search engine pos ...

Author	Message
Topic: nukeWYSIWYG(tm) and CKEditor 3.0
spottedhog Replies: 29 Views: 57239	Forum: FCKeditor/WYSIWYG Issues Posted: Mon Nov 28, 2011 8:48 pm Subject: re: nukeWYSIWYG(tm) and CKEditor 3.0
spottedhog Replies: 29 Views: 57239	Forgot to mention... There are a couple or three issues I ran up against in using CKEditor, and here are the fixes: There is white space or indenting after the paragraph tag. To remove it ckedit ...
Topic: nukeWYSIWYG(tm) and CKEditor 3.0
spottedhog Replies: 29 Views: 57239	Forum: FCKeditor/WYSIWYG Issues Posted: Mon Nov 28, 2011 7:58 pm Subject: re: nukeWYSIWYG(tm) and CKEditor 3.0
spottedhog Replies: 29 Views: 57239	Below is the code I use in my PHP Nuke fork. This should be enough to convert to RN. The biggest change is probably replacing $context with is_user() or is_admin() // CKEditor code for text edit ...
Topic: nukeWYSIWYG(tm) and CKEditor 3.0
spottedhog Replies: 29 Views: 57239	Forum: FCKeditor/WYSIWYG Issues Posted: Sun Nov 27, 2011 9:31 pm Subject: nukeWYSIWYG(tm) and CKEditor 3.0
spottedhog Replies: 29 Views: 57239	CKEditor 3.6.4 is the current version I think... Here is a link that shows how to include an upload function: http://www.mixedwaves.com/2010/02/integrating-fckeditor-filemanager-in-ckeditor/ ...
Topic: Cosmetic change in admin panel would be great
spottedhog Replies: 12 Views: 19586	Forum: RN v2.20.00 - Feedback Posted: Thu Feb 28, 2008 11:09 am Subject: re: Cosmetic change in admin panel would be great
spottedhog Replies: 12 Views: 19586	Here is what I use in my "fork": // GraphicAdmin(); OpenTable(); echo '<div class="titlebox"><a href="admin.php">', _GOTOADMINMENU ,'</a>&l ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Tue Sep 26, 2006 9:00 am Subject: re: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	In my 50 yrs. on God's green earth I have learned that one cannot be everything for everyone, whether it is personalities, business, and especially software. lol. I know support sites are filled ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Mon Sep 25, 2006 4:04 pm Subject: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	That vulnerability is to the bridge between Mambo/Joomla and SMF for syncing members/users table. That was not anything to do with the SMF code.... http://milw0rm.com/exploits/2021 It is simi ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Mon Sep 25, 2006 11:40 am Subject: re: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Message to all: I am not promoting or pushing for the entire Nuke community to use that Input Filter. I found it in my search to address the check_html and stripslash issue in the Patch files. Fo ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Mon Sep 25, 2006 11:00 am Subject: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Gremmie... I may have been doing something wrong, but I tried many variations to get "things" to globally recognize the $myFilter. Every --d***-- thing I tried just would not work. If someone could ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Mon Sep 25, 2006 10:56 am Subject: re: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	evaders....... Where have you seen or read or whatever on any security issues with SMF? I have not seen anything posted..... I am not sure I like the stripslashes, etc. in SMF, but it appears to be ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Mon Sep 25, 2006 9:03 am Subject: re: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Montego.... Interesting point about what to do about certain things.... There is an easy fix for that.... Create a standard block instead of creating from within the blocks admin section. I gu ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Sun Sep 24, 2006 8:08 pm Subject: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	well.... I just could not get anything to work with using the one class file but somehow have one function for allowable html tags and one for allow zero tags..... hence I just added the god-awful ...
Topic: stripslashes vs. eregi_replace
spottedhog Replies: 3 Views: 8827	Forum: Security - PHP Nuke Posted: Sun Sep 24, 2006 7:58 pm Subject: stripslashes vs. eregi_replace
spottedhog Replies: 3 Views: 8827	Look at the topic about Filtering.... Earlier I posted some code for an Input Filtering system, which is basically what you are needing. This system covers what you are asking. Database inputs sh ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Sun Sep 24, 2006 5:24 pm Subject: re: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	*EDITED* Discussion seems to have stopped for a bit, so I will bring up some things to consider.... Here is what I am now doing for my nuke fork: I have replaced all the addslashes, strip ...
Topic: .Htaccess problem
spottedhog Replies: 3 Views: 8502	Forum: Security - PHP Nuke Posted: Sun Sep 24, 2006 7:44 am Subject: .Htaccess problem
spottedhog Replies: 3 Views: 8502	The password needs to be encrypted before it is placed in the file.
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Tue Sep 05, 2006 7:59 pm Subject: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	I wondered when Sentinel would be brought up.... Will all of Sentinel be needed if there is input filtering and proper escaping? ...interesting thoughts ahead.....
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Thu Aug 31, 2006 4:55 pm Subject: re: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Here is a link to an Input Filter class system: http://www.cyberai.com/inputfilter/ You can download it from the Resources drop down box. Part of the filtering includes these 3 functions: ...
Topic: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Forum: Security - PHP Nuke Posted: Thu Aug 31, 2006 8:11 am Subject: Discussion: Filtering
spottedhog Replies: 63 Views: 73315	Coding Standards is more what I'm going for. How do we filter variables? Do we use some pre-existing setup or make our own. This is the discussion. - Evaders99 --------------------------- ...
Topic: Discussion (and consensus): get_magic_quotes_gpc / addslash
spottedhog Replies: 7 Views: 13448	Forum: Security - PHP Nuke Posted: Wed Aug 30, 2006 6:33 am Subject: re: Discussion (and consensus): get_magic_quotes_gpc / addsl
spottedhog Replies: 7 Views: 13448	Here are some debating issue links on addslashes vs. mysql_real_escape_string: Chris Shiflett-- http://shiflett.org/archive/184 Ilia Alshanetsky-- http://ilia.ws/archives/103-mysql_real_esca ...
Topic: Discussion (and consensus): get_magic_quotes_gpc / addslash
spottedhog Replies: 7 Views: 13448	Forum: Security - PHP Nuke Posted: Tue Aug 29, 2006 2:19 pm Subject: re: Discussion (and consensus): get_magic_quotes_gpc / addsl
spottedhog Replies: 7 Views: 13448	Looking to the future, I would think bypassing magic_qoutes_gpc would be the option since it has been reported to be deprecated in PHP 6. Creating some kind of function that tests for magic_quotes_gp ...
Topic: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	Forum: Security - PHP Nuke Posted: Mon Aug 28, 2006 2:35 pm Subject: re: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	montego.... I thought RavenNuke would evolve in that direction. The one part I left out of "the mission" was merging SMF (Simple Machines Forums) into Nuke, or vice versa. This means removing nuke_ ...
Topic: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	Forum: Security - PHP Nuke Posted: Mon Aug 28, 2006 8:40 am Subject: re: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	lol.... I am not a coder per se, but I have modified a bunch.... For the above function I took pieces from 3 or 4 different places, and put them all together. Yes, making code secure so one does ...
Topic: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	Forum: Security - PHP Nuke Posted: Mon Aug 28, 2006 6:35 am Subject: re: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	OK I revised my escape function. Now it tests if magic_quotes_gpc is on, verifies which php version is used, makes sure leading zeros are not deleted, and does the mysql_real_es ...
Topic: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	Forum: Security - PHP Nuke Posted: Mon Aug 28, 2006 5:34 am Subject: re: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	http://shiflett.org I got the concept of Filter Inputs, Escape Outputs from his website. And I will be going to the bookstore today. lol.... I had not heard about the "Pro" version..... ...
Topic: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	Forum: Security - PHP Nuke Posted: Sun Aug 27, 2006 11:47 am Subject: Filter Inputs--Escaping Outputs
spottedhog Replies: 12 Views: 17148	I am trying to get my head around db inputs/db outputs and SQL Injection in the PHP Nuke code (not worried about phpBB). My goal is to get around having to use addslashes and stripslashes everywhere. ...
Topic: Redirecting searches
spottedhog Replies: 35 Views: 48105	Forum: NukeSentinel(tm) Enhancement Requests Posted: Sun Jul 23, 2006 9:04 am Subject: Redirecting searches
spottedhog Replies: 35 Views: 48105	Thanks for the code darklord! ...just wanted to make sure. ahhhhh yes.... great point about links, etc. Hmmmmm.... It would appear then that one cannot totally eliminate all search engine pos ...