block-Ephemerids

Posted: Sun Mar 28, 2004 5:21 am

I installed the 6.9 security update package from here last night.

After installing my block-Ephemerids when back to it's jumbled ways....

So I screwed around with it to get it to work correctly. I thought I would paste it here for Raven to look at. If is is still secure you might want to include it in the update because this one works correctly.

Code:

<?php





/************************************************************************/


/* PHP-NUKE: Web Portal System                                          */


/* ===========================                                          */


/*                                                                      */


/* Copyright (c) 2002 by Francisco Burzi                                */


/* http://phpnuke.org                                                   */


/*                                                                      */


/* This program is free software. You can redistribute it and/or modify */


/* it under the terms of the GNU General Public License as published by */


/* the Free Software Foundation; either version 2 of the License.       */


/************************************************************************/


/*         Additional security & Abstraction layer conversion           */


/*                           2003 chatserv                              */


/*      http://www.nukefixes.com -- http://www.nukeresources.com        */


/************************************************************************/





if (eregi("block-Ephemerids.php",$_SERVER['PHP_SELF'])) {


    Header("Location: index.php");


    die();


}





global $prefix, $multilingual, $currentlang, $db;





if ($multilingual == 1) {


    $querylang = "AND elanguage='$currentlang'";


} else {


    $querylang = "";


}





$today = getdate();


$eday = $today[mday];


$emonth = $today[mon];


$title = ""._EPHEMERIDS."";


$content = "<b>"._ONEDAY."</b><br>";


$result = $db->sql_query("SELECT yid, content FROM " . $prefix . "_ephem WHERE did='$eday' AND mid='$emonth' ORDER BY yid $querylang");


while ($row = $db->sql_fetchrow($result)) {


$yid = intval($row['yid']);


$econtent = stripslashes($row['content']);


    if ($cnt == 1) {


   $boxstuff .= "<br><br>";


    }


$content .= "<b>$row[yid]</b><br>"; 


$content .= "$row[content]<br>"; 


$cnt = 1; 


} 


?>

What is changed....

ORDER BY yid

and

$content .= "<b>$row[yid]</b><br>";
$content .= "$row[content]<br>";
$cnt = 1;
}

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

I don't (and never have) use this module. I appreciate your contribution though and hopefully someone who uses it might take a look. I don't see any issues by just glancing at the code though.