September 2005 - support - lists.drupal.org

[drupal-support] Drupal 4.6.3 released (security alert)
by Dries Buytaert 17 Oct '05

17 Oct '05

The Drupal project has released version 4.6.3 of its open-source content management platform. Drupal 4.6.3 is a maintenance release that fixes problems reported using the bug tracking system. Drupal 4.6.3 also fixes a NEW SECURITY VULNERABILITY which was discovered in the third-party XML-RPC library Drupal uses. An attacker could execute arbitrary PHP code on a target site. Upgrading your existing Drupal sites is highly recommended. As the same bugs are also present in the Drupal 4.5 series, Drupal 4.5.5 is released as well. For detailed information about this release and the security vulnerability, please consult the release announcement at http:// drupal.org/drupal-4.6.3 and read the DRUPAL-SA-2005-004 security advisory at http://drupal.org/files/sa-2005-004/advisory.txt. Kudos to all Drupal contributors who helped to get these releases out, -- Dries Buytaert :: http://www.buytaert.net/

14 19

[drupal-support] any one tried the im module?
by Mohammed al-shar' 02 Oct '05

02 Oct '05

Blankhello. I am trying to use the im module that is still in cvs stage. anyone tried it? any known issues? regards Mohammed Al-Shar' Adaptive technology specialist email: mohammed(a)mystop.net mobile: 00962(79)6632186 website: http://www.mystop.net

4 4

[drupal-support] Too many security notices in banner module
by Larry 30 Sep '05

30 Sep '05

o am getting a lot of security notices in the banner module. I will be glad if anyone will give me an idea why this is so. I get this notice for every single user. I have incldued some of the notices below. Regards Larry Location /banner_file.php?pos=0&path=files&tid=0&max=10<http://londonbusinessnetwork.com/?q=/banner_file.php?pos=0&path=files&tid=0…> Terminated request because of suspicious input data: * a:3:{i:0;a:1:{i:0;a:1:{i:0;a:4:{i:0;s:1:"2";i:1;s:1:"5";i:2;s:2:"13";i:3;s:2:"22";}}}i:1;a:1:{i:0;a:4:{i:2;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"945";s:9:"day_views";s:3:"925";s:10:"week_views";s:3:"945";s:13:"day_max_views";s:1:"0";s:14:"week_max_views";s:1:"0";s:9:"max_views";s:1:"0";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:153:" document.write('<a href="?q=banner/2"><img src=\'?q=system/files&file=banners/networking_expo_newlogo_0.jpg\' border=0 width=\'100\' height=\'50\'></a>')";}i:5;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"814";s:9:"day_views";s:3:"814";s:10:"week_views";s:3:"814";s:13:"day_max_views";s:4:"1000";s:14:"week_max_views";s:4:"1000";s:9:"max_views";s:1:"0";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:148:" document.write('<a href="?q=banner/5"><img src=\'?q=system/files&file=banners/Lyncs Logo final 2_0.jpg\' border=0 width=\'127\' height=\'42\'></a>')";}i:13;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"331";s:9:"day_views";s:3:"331";s:10:"week_views";s:3:"331";s:13:"day_max_views";s:3:"500";s:14:"week_max_views";s:3:"500";s:9:"max_views";s:3:"500";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:519:" document.write('<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase=" http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version…" width="125" height="125"> <param name="movie" value="?q=system/files&file=banners/banner1.swf"> <param name="quality" value="high"> <embed src="?q=system/files&file=banners/banner1.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="125" height="125"></embed></object>')";}i:22;O:8:"stdClass":9:{s:5:"views";i:0;s:11:"total_views";s:3:"326";s:9:"day_views";s:3:"326";s:10:"week_views";s:3:"326";s:13:"day_max_views";s:3:"500";s:14:"week_max_views";s:4:"1000";s:9:"max_views";s:4:"1000";s:8:"filename";s:21:"?q=system/files&file=";s:4:"html";s:138:" document.write('<a href="?q=banner/22"><img src=\'?q=system/files&file=banners/LOGO22_0.gif\' border=0 width=\'125\' height=\'125\'></a>')";}}}i:2;i:1128065349;}*. Severity notice notice Hostname 195.93.21.8 <http://195.93.21.8> Upcoming events - If you could only attend one business networking event a year<http://londonbusinessnetwork.com/?q=if_you_could_only_attend_one_business_n…> (story)(57 days) - If you could only attend one business networking event a year<http://londonbusinessnetwork.com/?q=if_you_could_only_attend_one_business_n…> (story)(57 days) [image: Add to iCalendar] <webcal://londonbusinessnetwork.com/?q=event/ical> more <http://londonbusinessnetwork.com/?q=event> We recommend <http://www.amazon.co.uk/exec/obidos/redirect?tag=itsupport-21%26link_code=x…> -- London Networking EXPO™ - "The Ultimate Business Networking Experience™ in Europe! Tel 08701994474

2 1

Re: [drupal-support] Banner module
by Kobus Myburgh 30 Sep '05

30 Sep '05

Larry, Seems to be a problem with the foaf module. See if you disable that whether the problem still persists. If it is a problem with the foaf.module, it could be one of several reasons, which I can't research for you right now, but some include: 1. Possible bug in the code 2. Folder not writable (I think this can happen too...) 3. File doesn't exist (uploaded image) 4. Incompatible versions of module/Drupal 5 ... Maybe some more? Kobus >>> naasei(a)gmail.com 9/30/2005 12:56:02 PM >>> hey Kobus, It worked . thanks for your help. I wasjust about to dlete the whole thing to start again :) The other error I am getting is when I log in with user1, i am unable to log in and get this error " warning: getimagesize(0): failed to open stream: No such file or directory in /home/www/londonbusinessnetwork.com/modules/foaf.module on line 391. warning: Cannot modify header information - headers already sent by (output started at /home/www/londonbusinessnetwork.com/ " I then hit the back button and type my password again. then i am able to lo gin but get this "File copy failed: no directory configured, or it could not be accessed." Do you have any ida as to why I get this? On 9/30/05, Larry <naasei(a)gmail.com> wrote: > > > Thanks Kobus. Will try that. > larry > On 9/30/05, Kobus Myburgh <ITBJDM(a)puknet.puk.ac.za> wrote: > > > > Larry, > > > > Use phpmyadmin and find the database and edit the banner table. > > > > I haven't got it installed myself, but I assume you have to set the > > STATUS field of all entries to the opposite value. I assume they will > > currently be set to 1. > > > > I haven't tested my proposed solution, so hope this helps, if not, I > > will see if I can help later - a bit busy right now > > > > Regards, > > > > Kobus > > > > > > >>> naasei(a)gmail.com 9/30/2005 11:56:07 AM >>> > > I forgot to disable the banner block before disabling the banner module. > > Now I get this error > > *Fatal error*: Call to undefined function: banner_display() in > > */home/www/example.com/includes/common.inc(1857) > > : eval()'d code* on line *1* > > > > How do I rectify this please ? > > larry > > > > -- > > [ Drupal support list | http://lists.drupal.org/ ] > > > > > > -- > London Networking EXPO™ - "The Ultimate Business Networking Experience™ in > Europe! > Tel 08701994474 > -- London Networking EXPO™ - "The Ultimate Business Networking Experience™ in Europe! Tel 08701994474

2 1

Re: [drupal-support] Banner module
by Kobus Myburgh 30 Sep '05

30 Sep '05

Larry, Use phpmyadmin and find the database and edit the banner table. I haven't got it installed myself, but I assume you have to set the STATUS field of all entries to the opposite value. I assume they will currently be set to 1. I haven't tested my proposed solution, so hope this helps, if not, I will see if I can help later - a bit busy right now Regards, Kobus >>> naasei(a)gmail.com 9/30/2005 11:56:07 AM >>> I forgot to disable the banner block before disabling the banner module. Now I get this error *Fatal error*: Call to undefined function: banner_display() in */home/www/example.com/includes/common.inc(1857) : eval()'d code* on line *1* How do I rectify this please ? larry

2 2

[drupal-support] Banner module
by Larry 30 Sep '05

30 Sep '05

I forgot to disable the banner block before disabling the banner module. Now I get this error *Fatal error*: Call to undefined function: banner_display() in */home/www/example.com/includes/common.inc(1857) : eval()'d code* on line *1* How do I rectify this please ? larry

1 0

RE: [drupal-support] 4.3 Import Module, new name in 4.6?
by Metzler, David 29 Sep '05

29 Sep '05

Yes that's correct, you certainly to execute the cron hook. If you have trouble with crontab, the poormanscron module works pretty well for testing and evaluation sites. It basically checks for cron events that need to be run on every page load. Dave -----Original Message----- From: drupal-support-bounces(a)drupal.org [mailto:drupal-support-bounces@drupal.org] On Behalf Of Bob Doyle Sent: Wednesday, September 28, 2005 6:01 PM To: drupal-support(a)drupal.org Subject: Re: [drupal-support] 4.3 Import Module, new name in 4.6? Hi Gerhard, Thanks. I am upgrading the CMS News Community Aggregator to Drupal 4.6 I found the Aggregator, added 15 feeds, but cannot get them to update manually. Maybe I need the crontab in place? I will do that tomorrow. Gerhard Killesreiter wrote: >On Wed, 28 Sep 2005, Bob Doyle wrote: > > > >>Hi all, >> >>I am trying to aggregate news feeds. >> >>In 4.3, I used an import module. >> >>Can you point me to the equivalent for 4.6? >> >> > >aggregator.module (comes with Drupal) > >Cheers, > Gerhard > > > -- Bob Doyle Editor In Chief, CMS Review - http://www.cmsreview.com Technology Adviser, CM Pros - http://www.cmprofessionals.org Contributing Editor, EContent Magazine - http://www.econtentmag.com/About/AboutAuthor.aspx?AuthorID=155 President and CEO, skyBuilders - http://www.skybuilders.com 77 Huron Avenue Cambridge, MA 02138 617-876-5678 -- [ Drupal support list | http://lists.drupal.org/ ]

1 0

[drupal-support] Secondary submit form
by Kobus Myburgh 29 Sep '05

29 Sep '05

Hi, I am busy writing a module to do the following: 1. Administrator creates a topic that invites entries on the topic, e.g. 'Name your most embarrassing moment'. He then sets the closing date for the topic to some date in the future. 2. If the closing date is still not reached, a link is placed underneath the node (in this case called topic). This is working correctly depending on the value of 'topicopen'. 3. If the visitor clicks on 'submit entry' link, it must open up a form that accepts this visitor's 'most embarrassing moment' and associates it with the topic by means of $node->nid. 4. While this topic is open, the visitor can go back and edit his entry over and over if he likes. Any other visitor can do the same to his own individual topic, but may not see another visitor's reply. I am at a loss at how to do this - do I need two modules? Can I do it in one module? I assume this would be similar to comment.module, but it is way too advanced for my Drupal coding skills, so I am unsure of how to proceed. I like to learn new things myself, and I tried this, but I couldn't get this working. I believe the link should be something like: submission/x/y, where x has to be the $node->nid for association, and y the $user->uid, to ensure that the correct user ID can add/edit/view only his own entry. If this is indeed the correct approach, how do I go about implementing this? Anybody care to give me a sample code snippet or some more info? Any help would be greatly appreciated. TIA, Kobus

1 0

[drupal-support] 4.3 Import Module, new name in 4.6?
by Bob Doyle 29 Sep '05

29 Sep '05

Hi all, I am trying to aggregate news feeds. In 4.3, I used an import module. Can you point me to the equivalent for 4.6? -- Bob Doyle Editor In Chief, CMS Review - http://www.cmsreview.com Technology Adviser, CM Pros - http://www.cmprofessionals.org Contributing Editor, EContent Magazine - http://www.econtentmag.com/About/AboutAuthor.aspx?AuthorID=155 President and CEO, skyBuilders - http://www.skybuilders.com 77 Huron Avenue Cambridge, MA 02138 617-876-5678

2 2

[drupal-support] http://drupal.org/ - fails http://validator.w3.org/ validation
by Martin 28 Sep '05

28 Sep '05

Hello. I'm looking for a CMS. I was surprised that the drupal web site failed w3c.org validation with 9 errors. Easily fixed ???

3 2