Kunena 7.0.6 & Kunena 6.4.12 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.6 [K 7.0.6] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0.

The Kunena team is also pleased to announce the twelfth version of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4 and 6.0.

This is for users to help other users, to discuss topics that are related to forum administration in general or problems in running Joomla. This is not the place to ask for Joomla support. If you want assistance with Joomla please ask at forum.joomla.org

Question Editing profile - autofiled password

More
15 years 7 months ago - 15 years 7 months ago #67073 by devwiz
The problem appear when you have settings in your browser to remember auto fill the form fields or remember passwords automatique.

So when you EDIT your account you may be see that the first field from your passwords pre-filed (1) ********* . But if you do not fill the password confirmation field as well then ANY change (2) for ex. upload new avatar ) in the profille is not saved, and also there is no indication of error.




The solution could be changing the name of the form field password so it is not auto filled or at least generate error "Password doesn't match"



This message contains confidential information

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Disabled |

This message contains confidential information
htaccess: Exists | PHP environment: Max execution time: 1800 seconds | Max execution memory: 128M | Max file upload: 30M

Kunena version detailled: Installed version: 1.6.0 | Build: 3620 | Version name: Spika | Kunena detailled configuration:

Warning: Spoiler!

Third-party components: AlphaUserPoints: Disabled or not installed | CommunityBuilder: Disabled or not installed | Jomsocial: Disabled or not installed | UddeIm: Installed (Version : 2.1)

Plugins: System - Mootools12: Disabled | System - Mootools Upgrade: Disabled | JFirePHP: Disabled or not installed | Kunena Discuss: Disabled or not installed | Kunena Search: Disabled or not installed | My Kunena Forum Menu: Disabled or not installed

Modules: Kunena Latest: Enabled (Version : 1.6.0-RC2) | Kunena Stats: Enabled (Version : 1.6.0-RC2) | Kunena Login: Enabled (Version : 1.6.0-RC2)

Last edit: 15 years 7 months ago by devwiz. Reason: config

Please Log in or Create an account to join the conversation.

More
15 years 7 months ago #67201 by xillibit
Hello,

This is a known issue in k1.6.0 and this will be fixed in k1.6.1

I don't provide support by PM, because this can be useful for someone else.
The following user(s) said Thank You: devwiz

Please Log in or Create an account to join the conversation.

More
15 years 7 months ago #69685 by devwiz
I found very elegant solution of the mentioned problem:

You have to edit your 'edituser.php' file usually located at
\components\com_kunena\template\default\profile\edituser.php

Find the line of code (about line 53) that handles the input fields for password:
Code:
<input class="inputbox validate-password" type="password" id="password" name="password" value="" size="40" />

and change it to :
Code:
<input class="inputbox validate-password" type="password" id="password" name="password" value="" size="40" autocomplete="off" />

i.e. you have to add autocomplete="off" as parameter.

That's all! (optionally you may wish to add it to the password2 input field as well)
This will save you a lot of complains like "Why my profile doesn't save when I update it?"

Hope this helps :woohoo:

Please Log in or Create an account to join the conversation.

More
15 years 7 months ago #69706 by xillibit
Thanks for that

So, the issue still happen with K1.6.1 ?

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

More
15 years 7 months ago - 15 years 7 months ago #69752 by devwiz
Hi xillibit,

I just finished testing

I confirm that the problem persist with K1.6.1 after upgrade from K1.6.0 :

without the fix autocomplete="off" :



After applying the fix it is OK :



Also - there is still no error message if password doesn't match.


Hope this helps
Thank you
Last edit: 15 years 7 months ago by devwiz.

Please Log in or Create an account to join the conversation.

More
15 years 7 months ago #69815 by xillibit
the autocompleter="off" is working on Google Chrome ?

The autocompleter="off" is not valid in W3C, so you need to set autocompleter="off" with javascript

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

Time to create page: 0.269 seconds