Search found 18 matches

by nwcon
Fri Apr 22, 2011 11:36 pm
Forum: Modules/Add-Ons
Topic: Showtime in virtualmin cmsms problems
Replies: 3
Views: 2001

Re: Showtime in virtualmin cmsms problems

Okay, so I found the problem with links on slides. Turned out to be a browser caching issue. I had to manually clear my cache (both firefox and chrome) to get the updated flash showtime slideshow. I'd still like to find a solution to the jquery slideshow problem I'm having though. Regards, Mike Kimm...
by nwcon
Fri Apr 15, 2011 9:42 pm
Forum: Modules/Add-Ons
Topic: Showtime in virtualmin cmsms problems
Replies: 3
Views: 2001

Re: Showtime in virtualmin cmsms problems

UPDATE More information on Chrome under Ubuntu. It appears that my chrome profile has some issues with flash. A new profile works mostly as expected. One thing I did notice is that slide links don't work properly in chrome if I just type the domain as the url e.g. example.com But, if I type www.exam...
by nwcon
Fri Apr 15, 2011 5:51 pm
Forum: Modules/Add-Ons
Topic: Showtime in virtualmin cmsms problems
Replies: 3
Views: 2001

Re: Showtime in virtualmin cmsms problems

UPDATE

Actually, I just discovered that slide links do work except in my version of Chrome. I'm running Chrome version 10.0.648.151 under Ubuntu Hardy. Firefox (windows and linux) and Chrome on Windows XP works fine with the links.

Regards,

Mike
by nwcon
Fri Apr 15, 2011 2:44 pm
Forum: Modules/Add-Ons
Topic: Showtime in virtualmin cmsms problems
Replies: 3
Views: 2001

Showtime in virtualmin cmsms problems

I'm having a lot of trouble with the showtime module installed into a cmsms install under virtualmin pro. First thing to note is that the php memory setting needed to be increased (for a particular virtual host in virtualmin), but I also had to increase ICPCommTimeout (in virtualhost section of main...
by nwcon
Wed May 14, 2008 8:05 pm
Forum: CMSMS Core
Topic: front end file management and document indexing
Replies: 5
Views: 3647

Re: front end file management and document indexing

Okay, I hacked the actions.default.php in the Uploads module directory to add suport for a direct url. Now in my custom templates (summary and detailed) for Front End File Management, I can call {$entry->direct_url} to get the direct path to each file e.g. direct_url}>{$entry->name} Of course, if I ...
by nwcon
Wed May 14, 2008 5:07 pm
Forum: CMSMS Core
Topic: front end file management and document indexing
Replies: 5
Views: 3647

Re: front end file management and document indexing

This is a 'you can't have everything' problem. And I'm accustomed to that, but that's why we love open source...freedom to modify! Uploads provides indirect URLS so that it can do permissions checking, and download tracking, etc. Understandable and I'm thankful! I'm toying with my summary and detai...
by nwcon
Wed May 14, 2008 4:39 pm
Forum: CMSMS Core
Topic: front end file management and document indexing
Replies: 5
Views: 3647

Re: front end file management and document indexing

Pierre, What I'm trying to do is to have a 'repository' where I can upload documents and have them dynamically listed and linked on a given page.  I started working on an indexing php script to do just that, but then came across Front End File Management. There are pros and cons with each: php index...
by nwcon
Tue May 13, 2008 4:11 pm
Forum: Developers Discussion
Topic: SQL Injection and fix
Replies: 12
Views: 9984

Re: SQL Injection and fix

When using the rewrite rule, I do get the 403 error.  Without the rewrite rule, I'm redirected to the admin login page.

Regards,

nwcon
by nwcon
Tue May 13, 2008 3:12 pm
Forum: CMSMS Core
Topic: front end file management and document indexing
Replies: 5
Views: 3647

front end file management and document indexing

I'm using Front End File Management to manage documents on my website, and I'm trying to find a way to allow indexing of these public documents by robots.  I don't want robots to index everything in the uploads directory, nor everything accessed via /index.php?mact There's one line in my robots.txt ...
by nwcon
Mon May 12, 2008 7:54 pm
Forum: Developers Discussion
Topic: SQL Injection and fix
Replies: 12
Views: 9984

Re: SQL Injection and fix

I'm glad to report I found the cause of my concern...a big Duh on my part. I was actually using the following to test the SQL Injection exploit /modules/TinyMCE/content_css.php?templateid=-1/**/UNION/**/SELECT/**/username,1,password/**/FROM/**/cms_users/* Without being logged into the admin control ...
by nwcon
Mon May 12, 2008 4:42 pm
Forum: Developers Discussion
Topic: SQL Injection and fix
Replies: 12
Views: 9984

Re: SQL Injection and fix

Pierre, I don't understand : Isn't this statement incompatible with the previous one : "yes... It protects" ? Do you mean the above rewrite rule is defeated by some URL ? which URL ? When I request the 'bad' url on a current cmsms install (not my own), I'm redirected to the cmsms admin log...
by nwcon
Mon May 12, 2008 4:06 pm
Forum: Developers Discussion
Topic: SQL Injection and fix
Replies: 12
Views: 9984

Re: SQL Injection and fix

Yes, I have the following rewrite rule in place now: RewriteCond %{QUERY_STRING} \* RewriteRule ^.*$ - [F,L] I protects but it doesn't really appear to _solve_ the problem in TinyMCE.  I followed the CMSMS Security guide and added several url filters that use mod_rewrite. I feel safer now, but I'm s...
by nwcon
Wed May 07, 2008 5:53 pm
Forum: Developers Discussion
Topic: SQL Injection and fix
Replies: 12
Views: 9984

Re: SQL Injection and fix

I too still have the SQL injection issue.  I originally installed cmsms with version 1.2.3 and used the diff upgrade to 1.2.4...never used 1.2.2. Requesting /modules/TinyMCE/content_css.php?templateid=-1/**/UNION/**/SELECT/**/username,1,password/**/FROM/**/cms_users/* spit out users and hashed passw...
by nwcon
Tue May 06, 2008 11:02 pm
Forum: CMSMS Core
Topic: [Solved] Custom error pages - 401, 403 and 404
Replies: 7
Views: 5271

Re: Custom error pages - 401, 403 and 404

Just added a Wiki on my setup for custom error pages.  Its under Tips and Tricks.

Feel free to ask questions or point out errors  ;D

Regards,

nwcon
by nwcon
Tue May 06, 2008 9:16 pm
Forum: CMSMS Core
Topic: [Solved] Custom error pages - 401, 403 and 404
Replies: 7
Views: 5271

Re: Custom error pages - 401, 403 and 404

Sorry for the delay.  I will add my setup to the Wiki as soon as possible. But for a quick answer, I have the following in my apache.conf for my cmsms dir         Options -Indexes +FollowSymLinks         Order allow,deny         Allow from All         RewriteEngine on         # 301 Redirect all requ...

Go to advanced search