Kunena 7.0.6 & Kunena 6.4.12 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.6 [K 7.0.6] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0.

The Kunena team is also pleased to announce the twelfth version of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4 and 6.0.

Topics that are moved into this category are generally considered to be closed. Users may want to add additional information but these topics should not be resurrected in order to discuss new problems or unrelated matters.

Question Notification Email: Corruption of Web Addresses

More
15 years 2 months ago - 15 years 2 months ago #90996 by ptrnrs
Notification Email: Corruption of Web Addresses was created by ptrnrs
In my version of Kunena (1.6.3 - see below), I found that the following web addresses get corrupted in the email version of posts.
www.joomlahackers.net/joomla-1.6-tutoria...es-in-joomla-16.html
forum.joomla.org/viewtopic.php?f=199&t=251273

The first one corrupts at the "/n" and then second at the "&".

This problem with the first seems to be in the purify() function in /components/com_kunena/lib/kunena.smile.class.php at line 121:
Code:
$text = preg_replace ( '/&/', ' ', $text );
I haven't tracked down the second one yet but it's sure to be in the same function.

This message contains confidential information

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Disabled | Joomla! SEF rewrite: Disabled | FTP layer: Disabled |

This message contains confidential information
htaccess: Exists | PHP environment: Max execution time: 30 seconds | Max execution memory: 64M | Max file upload: 20M

This message contains confidential information

Joomla default template details : ja_social | author: JoomlArt.com | version: 1.2.1 | creationdate: 25/11/10

Kunena default template details : Blue Eagle (default) | author: Kunena Team | version: 1.6.3 | creationdate: 2011-01-31

Kunena version detailled: Installed version: 1.6.3 | Build: 4344 | Version name: Parlare | Kunena detailled configuration:

Warning: Spoiler!

Third-party components: AlphaUserPoints: Disabled or not installed | CommunityBuilder: Disabled or not installed | Jomsocial: Installed (Version : 2.0.5) | UddeIm: Disabled or not installed

Third-party SEF components: sh404sef: Installed (Version : 2.2.3.945) | ARTIO JoomSEF: Disabled or not installed | AceSEF: Disabled or not installed

Plugins: System - Mootools12: Disabled | System - Mootools Upgrade: Enabled | JFirePHP: Disabled or not installed | Kunena Discuss: Disabled or not installed | Kunena Search: Enabled (Version : 1.6.2) | My Kunena Forum Menu: Disabled or not installed | My Kunena Forum Posts: Disabled or not installed

Modules: Kunena Latest: Enabled (Version : 1.6.2) | Kunena Stats: Disabled or not installed | Kunena Login: Disabled or not installed

Last edit: 15 years 2 months ago by ptrnrs.

Please Log in or Create an account to join the conversation.

More
15 years 2 months ago - 15 years 2 months ago #90997 by ptrnrs
Replied by ptrnrs on topic Re: Notification Email: Corruption of Web Addresses
Below is the email version of the above post with corruptions indicated:-

Last edit: 15 years 2 months ago by ptrnrs.

Please Log in or Create an account to join the conversation.

More
15 years 2 months ago #91137 by ptrnrs
Replied by ptrnrs on topic Re: Notification Email: Corruption of Web Addresses
The "&" problem comes from /administrator/components/com_kunena/libraries/html/parser.php stripBBCode() line 54
Code:
$txt = self::escape ( $txt );
Also causes '<' to be converted to '&lt;' and ">' to '&gt;'.

Please Log in or Create an account to join the conversation.

Time to create page: 0.266 seconds