CastleCops® About XSS Exploit Patch

Need help? Click here to register for free! Absolutely zero advertisements on this site!

**$9736.22 of $21422.68**

Help CastleCops serve the community on new servers, Donate Here to reach our goal.

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Survey

Forum FAQ

Usergroups

Profile

Select FavForums

About XSS Exploit Patch
Goto page Previous 1, 2

All -> FavForums -> Web 2.0

[del.icio.us!] [digg it!] [reddit!]

View previous topic :: View next topic

Author

Message

Paul

CastleCops Founder

Joined: Feb 22, 2002
Posts: 27351

Posted: Fri Aug 16, 2002 11:41 am Post subject:

Which is a good thing... it helps to build a more secure community infrastructure. _________________ Paul Laudanski - http://www.laudanski.com http://www.linkedin.com/pub/1/49a/17b

Andi

Guest
IP: 209.226.*.*

Posted: Wed Aug 28, 2002 3:20 am Post subject:

In mainfile.php the following code from your XSS exploit patch caused problems on my site:

Code:

$str = eregi_replace("[\"\n\r]", "", $str);

The problem I was having was that all article submisssions/comments had no line breaks - they ended up being one massive paragraph!

I had to remove this code to get break tags to submit with article submissions & comments.

Andi

Paul

CastleCops Founder

Joined: Feb 22, 2002
Posts: 27351

Posted: Wed Aug 28, 2002 10:00 am Post subject:

It isn't the line itself, it is the piece within the quotes: "\n". If you remove that, you should be fine. _________________ Paul Laudanski - http://www.laudanski.com http://www.linkedin.com/pub/1/49a/17b

Paul

CastleCops Founder

Joined: Feb 22, 2002
Posts: 27351

Posted: Sun Sep 01, 2002 2:21 pm Post subject:

Ok, I just tried it and the plain text feature is re-instated. Just remove that bit I mentioned above and you'll be set. _________________ Paul Laudanski - http://www.laudanski.com http://www.linkedin.com/pub/1/49a/17b

IP: 209.226.*.*

Guest

Posted: Mon Sep 02, 2002 5:55 am Post subject:

Thanks for the help Paul! I didn't really want to remove the entire line but I wasn't sure what exactly the problem was. All fixed now. Andi

Paul

CastleCops Founder

Joined: Feb 22, 2002
Posts: 27351

Posted: Mon Sep 02, 2002 2:10 pm Post subject:

Thanks for pointing it out. I was going to try and find it when time permitted, but the server migration is taking up all my time right now. However, I have submitted the change to phpnuke.org. _________________ Paul Laudanski - http://www.laudanski.com http://www.linkedin.com/pub/1/49a/17b

	All -> FavForums -> Web 2.0	All times are GMT Goto page Previous 1, 2
Page 2 of 2

You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 161ppm 0.314s (0.049s) Making cybercriminals unhappy since 2002*