Kunena 7.0.4 Released

The Kunena team has announce the arrival of Kunena 7.0.4 [K 7.0.4] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0

Topics that are moved into this category are generally considered to be closed. Users may want to add additional information but these topics should not be resurrected in order to discuss new problems or unrelated matters.

Question IMG Tag problem after upgrade to Kunena 1.5.5 PROPER

More
16 years 8 months ago #27167 by jerry
Just back from my holiday. I am seeing inproper fix for this issue. Actually in Kunena 1.5.5 devs tried to check file extension. Both modifications from users are wrong as they disable this check.
Proper solution is:
/components/com_kunena/lib/kunena.parser.php lines: 345-348
before:
Code:
$file_ext = explode(',', $params->get('upload_extensions')); preg_match('/\.([\w\d]+)$/', $between, $matches); } if (!in_array(strtolower($matches[1]), $file_ext)) break;

after:
Code:
$file_ext = explode(',', $params->get('upload_extensions')); } preg_match('/\.([\w\d]+)$/', $between, $matches); if (!in_array(strtolower($matches[1]), $file_ext)) break;

HaND, Jerry

Please Log in or Create an account to join the conversation.

More
16 years 8 months ago #27174 by xillibit
Hello,

Thanks for sharing this, I will transmit this to the DEVs.

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

More
16 years 8 months ago #27223 by mjanzen128
Oh, thanks for the info. I was wondering myself why IMG tags werent working on 1.5.5. Thanks a ton!

Please Log in or Create an account to join the conversation.

More
16 years 8 months ago #27250 by deso
Thanks for sharing, I was about to drop myself dead after seeing all the pictures gone in my board.

Please Log in or Create an account to join the conversation.

More
16 years 8 months ago #27334 by Matias
Thanks Jerry for your fix.

BTW: Also line containing $matches = null; should go outside of that if clause (fixes a notice).

Sorry about the new bug -- we had bad security issues with existing exploits and we had to fix those as soon as possible. We didn't have enough time to test them well enough..

New release which fixes the new regression bugs will come in few days.

Please Log in or Create an account to join the conversation.

More
16 years 8 months ago #27381 by kmilos
Just out of curiosity (not a PHP coder): how come this code needs to go outside that if block, isn't that if block going to be executed every time since $file_ext is being initialized to null just above?

Please Log in or Create an account to join the conversation.

Time to create page: 0.315 seconds