Code Modification / Plugin / Announcement and Releases

All the links in admin work fast except content ....it takes forever to bring the page up .... I would like to get this fixed so I dont have to start over ... I can provide admin login to reputable pp...

Plesease help me, to disable security code at all.It is not work well and i what to disable it.(I'm not good at English - I'm Russian ). But you can write in english about my problem, - i'l try...

While making translation pack, I have found some kind of a bug (really 2 say, even dont know how 2 call it ) in search.phpButtons Check All, and Unckeck All, cant be changed without small hack .I`v ...

Sorry for cross posting, but I just realized I put a request in the non-e107 area.If anybody can help me, I need to remove ratings from my downloads (download.php). I looked at it, but it looks too co...

hi therei have installed coppermine on my site.for just a while a go the systemadministrator contacted me that the load with coppermine was to high 13:49:29 up 19 days, 19:50, 3 users, load average:...

maybe anyone have alt_newspost.php working on 0.616? it's script to post news by other users without ADMIN permissions but just with new SUBMITNEWS class....

Hi All,I remember I put in some fixes/changes to the search in 615a but they got lost when these forums went down and I dont think anybody recorded them Anyway, when you do a search and it gets to th...

Does anyone have a working babe of the day plugin? mine aint working no more!?...

It is still possible to issue a xss attack in the url field in version 6.16 the aim and msn fields are now parsed correctly but the url field still fails to catch the script....

Ok the issue is that if your not a member and you go to sign up you are taken to the checkout page with a $0 amount to pay.I have fixed this and just included the problematic file in the zip. Dow...

Is it possible to have an hack showing a link at the end of the article (or review or whatever) pointing to a list of ALL the articles (or whatever) of the same author?Thank you very much....

------------------------------------------------R.A.M Security Advisory------------------------------------------------[-link-]------------------------------------------------Severity: MediumTitle: e107 web portal user.php xssDate: May 21, 2004------------------------------------------------ Synopsis: All versions of e107 have a vulnerability thatallows javascript or html content in user.php. Description: All versions of e107 have a vulnerability thatallows xss or html tags and content to be posted to theWebsite URL for a member. The Problem lies within the usersettings.phpwhich does not parse < > ( ) tags thus allowing anyuser to insert a javascript or html. The problem liesin usersettings.php where the url is input when someoneupdates their url. Here is an example of how the input might be crafted: [-link-] <script>alert(document.cookie)</script> SyntaxHighlighter.Manager.add("Php"); Now whenever a user visits that members profile theywill get a javascript popup with their cookieinformation while the link will just show:[-link-]and when the link is clicked on it will take the userto mysiteurl.com. Impact: This may lead to cookie information beingstolen or other such xss attacks. Solution: I am not aware of a way to fix this problem yetas when trying to parse ( ) < > it would not accept anyvalid url....

Thought some of you might like to know that I have finally made a release of this. Links as follows..Demo <- Quick demo I knocked togetherProjects Page <- Various information links (downloads, b...