phpBB2Refugees.com Logo
Not affiliated with or endorsed by the phpBB Group

Register •  Login 

Continue the legacy...

Welcome to all phpBB2 Refugees!Wave Smilie

This site is intended to continue support for the legacy 2.x line of the phpBB2 bulletin board package. If you are a fan of phpBB2, please, by all means register, post, and help us out by offering your suggestions. We are primarily a community and support network. Our secondary goal is to provide a phpBB2 MOD Author and Styles area.

Could I ask some questions about a few Mods?

Goto page 1, 2  Next
 
Search this topic... | Search phpBB2 Discussion... | Search Box
Register or Login to Post    Index » phpBB2 Discussion  Previous TopicPrint TopicNext Topic
Author Message
Acaria
Board Member



Joined: 20 Feb 2009

Posts: 238



PostPosted: Mon Feb 23, 2009 11:31 am 
Post subject: Could I ask some questions about a few Mods?

Well, I've installed a few Mods on my forum. I'm setting up an avatar site, so I must ensure that none of these Mods have any bad, exploitable glitches.

Would it be alright if I posted a list of the Mods I've installed and have you tell me if you've heard of any such glitches or if it's okay?
Back to top
espicom
Board Member



Joined: 24 Nov 2008

Posts: 55
Location: Woodstock, IL


flag
PostPosted: Mon Feb 23, 2009 1:02 pm 
Post subject: Re: Could I ask some questions about a few Mods?

First place to look is the page where you downloaded the respective MODs... That's where the people who would know would be. You should ALWAYS bookmark the source page for a MOD, so that you can look for updates at regular intervals.

Short answers: If it loads include files, it might be vulnerable. If it has user-enterable fields associated with it, it might be vulnerable. If it accepts uploaded files from users and saves them to an area that is accessible via the web, it might be vulnerable.

On the other hand, if it works entirely within the variables already read in by phpBB, it is less likely to be vulnerable.
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Mon Feb 23, 2009 1:47 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Acaria wrote:

Would it be alright if I posted a list of the Mods I've installed and have you tell me if you've heard of any such glitches or if it's okay?

I'm familiar with a lot of MODs, so go ahead and list them out. icon_smile.gif

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield ILMac 512K BlogMac GUI
Back to top
Acaria
Board Member



Joined: 20 Feb 2009

Posts: 238



PostPosted: Mon Feb 23, 2009 7:56 pm 
Post subject: Re: Could I ask some questions about a few Mods?

[espicom]

The only thing is that the main ones in question are Zarath mods, and I've looked over the Phpbb site but it seems as though all his threads on the subject have either been deleted, moved, or the main post edited and a lot of posts apparently deleted. D:


[Dog Cow]

Okay, thanks so much! icon_biggrin.gif
The Mods wrote:
NulAvatar
Xore's Cash Mod
Zarath's Shop Mod 3.0.6
Zarath's Synthesize Shop Mod 1.0.1
Zarath's User Shop Mod 2.0.1
Zarath's Auction Mod 2.0.4
Zarath's Bank Mod 2.0.1
Zarath's Lottery Mod 2.3.0
ADR 0.4.5 (Though pretty much only the actual Battling part will still be enabled; I'm aware of the Vault glitch)
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Mon Feb 23, 2009 8:06 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Acaria wrote:

Okay, thanks so much! icon_biggrin.gif[/list][/size]
The Mods wrote:
NulAvatar
Xore's Cash Mod
Zarath's Shop Mod 3.0.6
Zarath's Synthesize Shop Mod 1.0.1
Zarath's User Shop Mod 2.0.1
Zarath's Auction Mod 2.0.4
Zarath's Bank Mod 2.0.1
Zarath's Lottery Mod 2.3.0
ADR 0.4.5 (Though pretty much only the actual Battling part will still be enabled; I'm aware of the Vault glitch)

NulAvatar needs some fixes when have over 1,000 items, and there's also a way to equip items which you don't own. Cash Mod is A-OK, being the only officially validated MOD in that list. All the Zarath MODs are probably OK. ADR has a few minor problems, so you should probably check this site to see what's new and happening.

Good luck with your site.

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield ILMac 512K BlogMac GUI
Back to top
Acaria
Board Member



Joined: 20 Feb 2009

Posts: 238



PostPosted: Mon Feb 23, 2009 8:13 pm 
Post subject: Re: Could I ask some questions about a few Mods?

    What kind of fixes?

    Would it be posted on NulAdion's site, even though it's been abandoned forever? XD


    Yeah, I'm looking over the ADR site now looking for anything severe. >.<


    Thanks so much for the help! :D
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Mon Feb 23, 2009 8:28 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Acaria wrote:

Would it be posted on NulAdion's site, even though it's been abandoned forever? XD

No, there hasn't been anything posted. A site I work for uses Nulavatar, so I was commissioned to make some changes to it.

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield ILMac 512K BlogMac GUI
Back to top
Acaria
Board Member



Joined: 20 Feb 2009

Posts: 238



PostPosted: Mon Feb 23, 2009 9:11 pm 
Post subject: Re: Could I ask some questions about a few Mods?

    Ah, okay. :3

    I'll look into it on my own, but if I start to inch up to around 800-900 items, I'll definitely contact you. :3

    Thanks! :D
Back to top
Rigged
Board Member



Joined: 29 May 2009

Posts: 11



PostPosted: Sat Jul 04, 2009 2:31 am 
Post subject: Re: Could I ask some questions about a few Mods?

Nuladion abandoned the mod and is working for a different website now.

He said he wont be going back to working on NulAvatar.. Sadly.
Back to top
Acaria
Board Member



Joined: 20 Feb 2009

Posts: 238



PostPosted: Sat Jul 04, 2009 3:01 am 
Post subject: Re: Could I ask some questions about a few Mods?

What website is this? :O
Back to top
transm
Board Member



Joined: 28 Jun 2009

Posts: 13


flag
PostPosted: Thu Jul 16, 2009 8:37 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Was CashMod ever vulnerable? At one point I put all my cashmod admin files into a clone admin folder with secret name because I was convinced people could manipulate cash or something like that without being admin. I probably could have put a password on the admin folder instead.

Was this my imagination as I'm sure people had this problem? Was it fixed? Also is it possible for admin files to be insecure like this so non admins could use them?
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Fri Jul 17, 2009 10:36 am 
Post subject: Re: Could I ask some questions about a few Mods?

transm wrote:

Was this my imagination as I'm sure people had this problem? Was it fixed? Also is it possible for admin files to be insecure like this so non admins could use them?

Cash MOD has been around since 2003, so there might have been problems way back then, but today, there don't seem to be any.

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield ILMac 512K BlogMac GUI
Back to top
Catghost
Board Member



Joined: 18 Jul 2009

Posts: 2



PostPosted: Sat Jul 18, 2009 7:57 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Dog Cow wrote:
Acaria wrote:

Okay, thanks so much! icon_biggrin.gif[/list][/size]
The Mods wrote:
NulAvatar
Xore's Cash Mod
Zarath's Shop Mod 3.0.6
Zarath's Synthesize Shop Mod 1.0.1
Zarath's User Shop Mod 2.0.1
Zarath's Auction Mod 2.0.4
Zarath's Bank Mod 2.0.1
Zarath's Lottery Mod 2.3.0
ADR 0.4.5 (Though pretty much only the actual Battling part will still be enabled; I'm aware of the Vault glitch)

NulAvatar needs some fixes when have over 1,000 items, and there's also a way to equip items which you don't own. Cash Mod is A-OK, being the only officially validated MOD in that list. All the Zarath MODs are probably OK. ADR has a few minor problems, so you should probably check this site to see what's new and happening.

Good luck with your site.

If you don't mind my asking, what kind of changes does nulavatar need? icon_redface.gif
Because right now I'm at 885 images, and about to add a bunch more.

Thanks.
Back to top
Dog Cow
Board Member



Joined: 18 Nov 2008

Posts: 378


flag
PostPosted: Sun Jul 19, 2009 4:15 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Catghost wrote:

If you don't mind my asking, what kind of changes does nulavatar need? icon_redface.gif
Because right now I'm at 885 images, and about to add a bunch more.

Thanks.

I'm going to be posting them in a few days.

The summary is: if you've got the option where a user must have a certain item in his inventory to be able to use an image, then Nulavatar ends of looping over every single item instead of just the ones in this user's inventory. This loop is done on every layer, and there is an SQL query inside each loop as well. Here is a longer, more detailed explanation.

But like I said, I've got the fix for this problem and some other problems with Nulavatar, so I'll post them in a few days.

_________________
Moof!
Lincoln's Tomb, Oak Ridge Cemetery, Springfield ILMac 512K BlogMac GUI
Back to top
Catghost
Board Member



Joined: 18 Jul 2009

Posts: 2



PostPosted: Wed Jul 22, 2009 9:39 pm 
Post subject: Re: Could I ask some questions about a few Mods?

Wow.. I knew nulavatar can have lots of queries.. but I had no idea about the loops thing. icon_eek.gif
Safe to say I look froward to you posting the fixes. icon_smile.gif

Thanks.
Back to top
Display posts from previous:   
Register or Login to Post    Index » phpBB2 Discussion  Previous TopicPrint TopicNext Topic
Page 1 of 2 All times are GMT - 4 Hours
Goto page 1, 2  Next
 
Jump to:  

Index • About • FAQ • Rules • Privacy • Search •  Register •  Login 
Not affiliated with or endorsed by the phpBB Group
Powered by phpBB2 © phpBB Group
Generated in 0.0824 seconds using 17 queries. (SQL 0.0231 Parse 0.0011 Other 0.0582)
phpBB Customizations by the phpBBDoctor.com
Template Design by DeLFlo and MomentsOfLight.com Moments of Light Logo