Bravo List - YSE PRE7 - Security & Bugs

Bravo List (http://www.bvlist.com/index.php)

- Yuna Scatari Edition (YSE) (http://www.bvlist.com/forumdisplay.php?f=22)

- - YSE PRE7 - Security & Bugs (http://www.bvlist.com/showthread.php?t=2052)

YSE PRE7 - Security & Bugs

Post all security holes and bugs here!

Only found a few bugs:

1. in my.php if you add a avatar doesnt metter how big you set the size of the allowed avatar it always says its to big! With external avatar

2. also in my.php ive you add a new language such as dutch my.php cant see it and some language maps such as belgium works fine

3. The bug that new torrents shown as dead even ive they are seeded fine

Fixed: by changing line 90 in cleanup.php to sql_query("UPDATE torrents SET visible='no' WHERE visible='yes' AND last_action < $deadtime");

4. Bug in functions_announce.php there was missing } on line 195

Fixed: to at the }

5. Cant upload an avatar to the site gives me a strange error that i need to change the gif

Delete News
Are you sure you want to delete this news? Click here If you are sure.

link don't works!

change $htmlstrip = true to false in function newerr :nosepick:

YSE PRE 7-liquidate bug

Excellent realiz YSE PRE 7 I in it is enamoured much prettily respect BoLaMN - kp380lv that promote the product and quality!
but plenty of bugs I itself with one head not in power to correct all bugs that there there is! hope on your community and your not mediocre help! please let's begin together correct and shall correct some bugs as here was already mentioned:

1. in my.php if you add a avatar doesnt metter how big you set the size of the allowed avatar it always says its to big! With external avatar
2. also in my.php ive you add a new language such as dutch my.php cant see it and some language maps such as belgium works fine
3. The bug that new torrents shown as dead even ive they are seeded fine
Fixed: by changing line 90 in cleanup.php to sql_query("UPDATE torrents SET visible='no' WHERE visible='yes' AND last_action < $deadtime");
4. Bug in functions_announce.php there was missing } on line 195
Fixed: to at the }
5. Cant upload an avatar to the site gives me a strange error that i need to change the gif
6.Are you sure you want to delete this news? Click here If you are sure.
7.blocks.php
Fatal error: Cannot redeclare recache_blocks() (previously declared in C:\xampp\htdocs\TRACk\admin\modules\=blocks.php:31 ) in C:\xampp\htdocs\TRACk\admin\modules\blocks.php on line 37
8.Error in SQL
The response from the server MySQL: Column count doesn't match value count at row 1
в C:\xampp\htdocs\TRACk\admin\modules\=blocks.php, line 231
Запрос номер 11.
9.simpaty.php

Write to the reason why you feeled. Respect User:

10.friends.php Вы хотите удалить друга. Нажмите сюда если вы уверены.
11.stats.php -Category ActivityCategory Last Upload Torrents Perc. Peers Perc.Фильмы DVDRip 1235829550 (2043 week)
I think you not to ignore and raise the quality YSE PRE 7 on due level!
forgive for english
:ok:

Quote:

Originally Posted by Undefined (Post 9357)

change $htmlstrip = true to false in function newerr :nosepick:

where exactly in what file?

include/functions_global.php

masterdan i think you need to remove =blocks.php from admin/modules

because is not in the normal source and that gives tou errors ;)

YSE PRE 7-liquidate bug

Quote:

Originally Posted by Undefined (Post 9525)

include/functions_global.php

thank you!:ok:
now bugs connected with removing and respect: simpaty.php-friends.php-news.php? has fallen off!
************************************************** ******************************
remain bugs with creation block if possible help with this bug-shortage
Error in SQL

Code:

The response from the server MySQL: Column count doesn't match value count at row 1

in C:\xampp\htdocs\TRACk\admin\modules\=blocks.php, line 231 Requests number 11.

stats.php-1235829550 (2043 week)

Bump:

Quote:

Originally Posted by carphunter18 (Post 9527)

masterdan i think you need to remove =blocks.php from admin/modules

because is not in the normal source and that gives tou errors ;)

yes I so and do!

blocks.php is replaced version YSE Yuna Pre7 RC v02.2 - YSE Yuna Pre7 RC v02.1 and Pre6 no effect swears here is on this!

Code:

sql_query("INSERT INTO ".$prefix."_blocks VALUES (NULL, ".implode(", ", array_map("sqlesc", array($bkey, $title, $content, $bposition, $weight, $active, $btime, $blockfile, $view, $expire, $action, $which))).")") or sqlerr(__FILE__,__LINE__);

Keep search bugs guys!;)

YSE PRE 7-liquidate bug

Quote:

Originally Posted by kp380lv (Post 9553)

Keep search bugs guys!;)

Searching for of the result and profits on my bug will not bring =(:sos:

thanks for finding :)

thanks for finding all those bugs all fixed up on my source including nfo mod and inviteadder fixed the avatar bugs too! may release a new release from my source abit later down the track as doing something abit different with it to hopefully change it away from yuna!

BoLaMN then you finish this source or not!?

And don't forget for security holes.

519 line at include/functions.php

I have instralled my tracker for first time at the maximum users i put 1000000000 and i configured the other fuctions and i finished the installation bu when i got to my site there was an error saying that there was a problem at line 519 at include/functions.php i delete all the line and then the scipt was working please check it and give me a fix for that bug immidiately!

Was the line i deleted importand for my tracker security?

Seems about one problem more.

Well problem could be with CONFIG file but i'm not sure.

I get when i trie to send PM !

Code:

Parse error: syntax error, unexpected '[' in /home/a2474811/public_html/message.php on line 432

this has already been covered but here you go!

goto line 432 of message.php

and change:

PHP Code:


		
			
$n_pms = 0 + $_POST['n_pms'];['n_pms'];

to:

PHP Code:


		
			
$n_pms = 0 + $_POST['n_pms'];

make sure you search first.

when i try to use admin.php

PHP Code:


		
			
Fatal error: Call to undefined function loggedinorreturn() in  /home/****/public_html/***/admin/admin.php on line 3

:shock:

anyone knows to fix the recover.php??

Help with uploading torent

Please help with uploading torrent

it shows error like this

http://s47.radikal.ru/i116/1007/78/ea906bc63f65.jpg

I cant find any answers here in this forum

thank you in advance

p.s. i use Yuna Pre7 RC v02.2 - kp380lv