miniBB ® miniBB®
miniBB Support Forums
 | Forums | Register | Reply | Search | Statistics | Manual |
Specific miniBB Support Forums / Specific /   

Custom Private Messaging addon problem

Page  Page 2 of 2:  « Previous  1  2  
Author Anonymous
Guest
#16 | Posted: 2 Aug 2007 10:36 
I have the private messaging code in bb_plugins at the very end. I am using just about all the add-ons and they all work great. I tried to delete messages from inside the message but it does the same thing. It just brings me back to the private messaging screen with nothing deleted. Is there some editing to the form.js file I need to be doing? I haven't edited any of the template files.

Author Paul
Lead Developer
#17 | Posted: 2 Aug 2007 13:48 
I suppose this also might happen if you have not updated your forums for so called "CSRF issue"... be sure you have the latest miniBB release properly updated. Specially be sure index.php contains definition of the variable $csrfchk. If it's not defined, many deletion operations will fail.

Author Anonymous
Guest
#18 | Posted: 4 Aug 2007 12:39 
yeah i have the most recent files, crsf is defined in the index.php file. where is the function/code for the actions in the drop down menu? Its like its not even passing any on and just refreshes the page. Is there an update for this plugin coming out soon?

Author tom322
Registered
#19 | Posted: 4 Aug 2007 12:43 
where is the function/code for the actions in the drop down menu?
addon_pmail.php

Is there an update for this plugin coming out soon?
Why release update of something that should work well? :}

Author Anonymous
Guest
#20 | Posted: 4 Aug 2007 12:58 
OK i got it to work but shouldn't have. I took out line 66 in addon_pmail.php which is

if($csrfchk!=$_COOKIE[$cookiename.'_csrfchk']) $chkAct='';

and everything works now. Do you have any idea why?

Author Paul
Lead Developer
#21 | Posted: 6 Aug 2007 09:51 
Anonymous
I already informed you this is the CSRF issue problem...

It's not the best solution to take off this line, however if it works you could leave it as it is and hope that hackers will not use this hole.

I don't know what the exact reason could be, I could investigate it only on your side getting FTP information and analyzing files of your forums, but this, as solving of any custom problem, fits only in our paid support.

Page  Page 2 of 2:  « Previous  1  2 
Specific miniBB Support Forums / Specific / Custom Private Messaging addon problem Top

Your Reply Click this icon to move up to the quoted message

 Short link for this topic:

 ?
Only registered users are allowed to post here. Please, enter your username/password details upon posting a message, or register first.


Before posting, make sure your message is compliant with our forum posting rules. If not, it may be locked or deleted with no explanation.
 
 
miniBB Support Forums Powered by Forum Software miniBB ® Features  Requirements  Demo  Download  Showcase  Gallery of Arts
Compiler  Premium Extensions  Premium Support  License  Contacts
Try the Captcha add-on: protect your miniBB-forums from the automated spam and flood.
Captcha Addon for miniBB