PHPNuke 7.5

Insane Joined: Jul 30, 2004 Posts: 85

chatserv wrote:

Rage wrote:

It is a nice feature, but I can't really see a great deal of people using the new way, they'll stick to what they know for now. Rolling Eyes

It's easy to convert old mods to the new method, staying behind by using the old method is a mistake in my view.

Yeah, but I was saying how alot of people will continue to use the old way until someone slaps them out of their sleep.

chatserv wrote:

Rage wrote:

(Why is my rank insane!? I'LL KILL YOU ALL! Cool

)

You answered that one yourself Laughing

Urge to kill, rising... Twisted Evil

Posted: Mon Sep 27, 2004 10:49 pm

I've got a fresh install of 7.5 I'd like to add NSNgroups 1.5.0. RC2.

As usual, I still don't get it. How can I convert the admin files to conform to new 7.5 standard?

RavensScripts

registered · Posted: Tue Sep 28, 2004 1:25 pm

NSN Groups 1.5.0 Finial will be released on http://www.nukescripts.net later this week. It works with 6.5 thru 7.5 where the RC's do not.

Posted: Tue Sep 28, 2004 1:40 pm

Cool ...

I've got to facilitate an installfest for my computer group on Sunday. It has taken a year .. but we have a go for phpnuke. Wink

I need groups! And a calendar. Any suggestions? Everything else is ready to start importing content.

New Member Joined: Oct 08, 2004 Posts: 1

Hello I found this in the nukecops forums

Quote:

phpNuke 7.5 WITH HEAVY SECURITY HOLES
Sicherheit

Tora von MaaxDesign writes: “When testing new administration system of phpNuke 7.5 I discovered heavy security holes. All modules, which use the new admin directory in the module directory, can be manipulated without being logged in as administrator.
On my test system it was possible for me to create download categories and delete user by simple URL manipulation. We have not tested more details until now. However possible also all other administration functions of these modules are easy to manipulate via the same way. Therefore I can only advise against the installation of this new version. wrote on 18.09

some comment on that?

Only registered users can see links on this board! Get registered or login!

Posted: Fri Oct 08, 2004 4:46 am

Are you using NukeSentinel(tm)?

If you add:

Code:

if($aid AND (!isset($admin) OR empty($admin)) AND $op!='login') {


  unset($aid);


  unset($admin);


}

right after the // Basic Value Setup in includes/sentinel.php. If not add it to your mainfile.php after the opening <? php

New Member Joined: Oct 08, 2004 Posts: 5 Location: Canada

Guess you could say this question is for Bob but if anyone else has an idea why the Group Downloads does not work with 7.5 or what my problem is.

I did a fresh install of Groups 1.5.0 Uni and Group Downloads 700a as this is the latest that I could find. When I go to the Downloads section the Administration Menu it brings me back to my websites homepage. When I go to the Downloads section under Modules Administration it will allow me to add Categories and Modify categories and it will even allow me to link to an outside download but it will not allow me to add downloads or define what groups can access the Downloads areas.

Help Please Smile

DawgE

Posted: Fri Oct 08, 2004 10:07 pm

NSN GR Downloads requires minor re-writes for the new 7.5 system. I have it done for my site but haven't released it to the public yet since I've been so busy with NukeSentinel(tm) 2.1.0 Smile

Posted: Sat Oct 09, 2004 5:03 am

Thanks for the Quick reply Bob. I am thinking about going back to 7.4 for the time being as not many of the modules that I am using are playing well with 7.5

I will keep an eye on your site and see when I can upgrade to 7.5 safely Smile

Regular Joined: Jun 04, 2004 Posts: 84 Location: Germany

Raven wrote:

Chat,

It seems that this upgrade code

Code:

// Administrators Table modification


$db->sql_query("ALTER TABLE nuke_authors DROP radminarticle, DROP radmintopic, DROP radminuser, DROP radminsurvey, DROP radminlink , DROP radminfaq, DROP radmindownload, DROP radminreviews, DROP radminnewsletter, DROP radminforum, DROP radmincontent, DROP radminency");

is going to break any third party module that looks for these fields in the authors table. is that a valid assessment?

also it does not work if you have another prefix as "nuke" like my Problem that the Modules are not shown in the "Modules Administration" Section

Only registered users can see links on this board! Get registered or login!

with best regards
Brujo