Kunena 7.0.5 & Kunena 6.4.11 – Security Updates Released

The Kunena team has announce the arrival of Kunena 7.0.5 [K 7.0.5] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0.

The Kunena team is also pleased to announce the eleventh version of Kunena 6.4, a native Joomla extension for Joomla! 5.0, 5.1, 5.2, 5.3, 5.4 and 6.0.

Topics that are moved into this category are generally considered to be closed. Users may want to add additional information but these topics should not be resurrected in order to discuss new problems or unrelated matters.

Important Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

Matias
Topic Author
Offline
Administrator

16 years 1 month ago #43621 by Matias

Replied by Matias on topic Re:Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

I just installed new version which should fix the issue in Kunena.com.

Here is the same fix:

File Attachment:

File Name: emailfix.zip
File Size:12.93 KB

It contains only class.kunena.php which goes to /components/com_kunena directory.

Can you verify that it fixes the issue?

Please Log in or Create an account to join the conversation.

Trouble
Offline
Junior Member

16 years 1 month ago - 16 years 1 month ago #43622 by Trouble

Replied by Trouble on topic Re:Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

I'm afraid subscribers are still not receiving mail, nor is the debug output showing that it's even attempting to mail them!

I performed the same two test posts, first from one of the regular test user subscribers, and another from my Administrator account (my account is now a subscriber and Administrator in these tests, whereas before it was just an Administrator, otherwise everything is the same).

After the first hotfix, but before the second hotfix (this result previously posted):

Code:

Configuration (1, 1, 1, hold=0)
Author: atestuser2
Subscribers: atestuser, atestuser2
* User trouble (0, , 1)... Sending email to [email protected]
* User stephen (0, , 1)... Sending email to [email protected]
* User david (0, 0, 1)... Sending email to [email protected]

Your message has been successfully posted

After the second hotfix:

Code:

Configuration (1, 1, 1, hold=0)
Author: atestuser2
Subscribers: trouble, atestuser, atestuser2
* User trouble (1, 0, 1)... Sending email to [email protected]
* User stephen (0, 0, 1)... Sending email to [email protected]
* User david (0, 0, 1)... Sending email to [email protected]

Your message has been successfully posted

Note the second digit is now printed for trouble and stephen (these two are Super Administrators, david is an Administrator), whereas it was null before.

After the first hotfix, but before the second hotfix (this result previously posted):

Code:

Configuration (1, 1, 1, hold=0)
Author: trouble
Subscribers: atestuser, atestuser2
* User stephen (0, , 1)... Sending email to [email protected]
* User david (0, 0, 1)... Sending email to [email protected]

Your message has been successfully posted

After the second hotfix:

Code:

Configuration (1, 1, 1, hold=0)
Author: trouble
Subscribers: trouble, atestuser, atestuser2
* User stephen (0, 0, 1)... Sending email to [email protected]
* User david (0, 0, 1)... Sending email to [email protected]

Your message has been successfully posted

Note the second digit is now printed for stephen (stephen is a Super Administrator, david is an Administrator), whereas it was null before.

Last edit: 16 years 1 month ago by Trouble.

Please Log in or Create an account to join the conversation.

Matias
Topic Author
Offline
Administrator

16 years 1 month ago - 16 years 1 month ago #43623 by Matias

Replied by Matias on topic Re:Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

Can you enable Debug in Joomla, post a message and find that above query and give your version to me?

Can you also try to run it in phpmyadmin?

Edit: can you also check that the thread is the right one!

Last edit: 16 years 1 month ago by Matias.

Please Log in or Create an account to join the conversation.

Trouble
Offline
Junior Member

16 years 1 month ago - 16 years 1 month ago #43626 by Trouble

Replied by Trouble on topic Re:Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

Still haven't received any mail notifications from this forum

Anyway, the results from the test post...

Code:

Configuration (1, 1, 1, hold=0)
Author: trouble
Subscribers: trouble, atestuser, atestuser2
* User stephen (0, 0, 1)... Sending email to [email protected]
* User david (0, 0, 1)... Sending email to [email protected]

Your message has been successfully posted

Joomla debug output from the same post of the query you requested:

Code:

53.
      SELECT u.id, u.name, u.username, u.email,
                                              IF( s.thread IS NOT NULL, 1, 0 ) AS subscription,
                                              MAX(IF( c.moderated=1
        AND p.moderator=1
        AND ( m.catid IS NULL OR m.catid=6), 1, 0 )) AS moderator,
                                              IF( u.gid IN (24, 25), 1, 0 ) AS admin
                                             
        FROM jos_users AS u
                                             
        LEFT JOIN jos_fb_users AS p
        ON u.id=p.userid
                                             
        LEFT JOIN jos_fb_moderation AS m
        ON u.id=m.userid
                                             
        LEFT JOIN jos_fb_categories AS c
        ON m.catid=c.id
                                             
        LEFT JOIN jos_fb_subscriptions AS s
        ON u.id=s.userid
        AND s.thread=107
        WHERE u.block=0
        AND u.id NOT IN (62) 
        AND ( ( s.thread IS NOT NULL 
        AND u.gid IN (24,23,25,30) )  OR  ( c.moderated=1
        AND p.moderator=1
        AND ( m.catid IS NULL OR m.catid=6 ) )  OR  ( u.gid IN (24, 25) ) )
        GROUP BY u.id

The above Joomla debug output also confirms the thread ID is indeed 107, and I definitely used 107 to execute your SQL query earlier (still have the query and output history on screen).

When I run the above query in phpmyadmin I get the following results:

Code:

id  name              username    email                  subscription   moderator  admin
63  Stephen           stephen     [email protected]     0              0          1
82  David             david       [email protected]       0              0          1

Different (and incomplete - no subscribers) results from the SQL query you asked me to run earlier (I ran that in phymyadmin too)! No subscribers are returned this time! Where did they go?? They are listed in the Kunena debug output above!

For completeness, so it's all in one thread post, earlier, as you requested, I ran the following query in phymyadmin:

Code:

SELECT u.id, u.name, u.username, u.email, IF( s.thread IS NOT NULL , 1, 0 ) AS subscription, IF( c.moderated =1
AND p.moderator =1
AND (
m.catid IS NULL
OR m.catid =2
), 1, 0 ) AS moderator, IF( u.gid
IN ( 24, 25 ) , 1, 0 ) AS admin
FROM jos_users AS u
LEFT JOIN jos_fb_users AS p ON u.id = p.userid
LEFT JOIN jos_fb_moderation AS m ON u.id = m.userid
LEFT JOIN jos_fb_categories AS c ON m.catid = c.id
LEFT JOIN jos_fb_subscriptions AS s ON u.id = s.userid
AND s.thread =107
WHERE u.block =0
AND (
(
s.thread IS NOT NULL
)
)
GROUP BY u.id
LIMIT 0 , 30

And the results were:

Code:

id  name              username    email                  subscription   moderator  admin
74  Atest User        atestuser   [email protected]   1              0          0
149 Anothertest User  atestuser2  [email protected]  1              0          0

My Joomla version is 1.5.11. I've been trying to get the Update Manager extension to work before updating to the latest version.

Last edit: 16 years 1 month ago by Trouble.

Please Log in or Create an account to join the conversation.

Matias
Topic Author
Offline
Administrator

16 years 1 month ago - 16 years 1 month ago #43635 by Matias

Replied by Matias on topic Re:Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

I now see the problem.

The main difference between those two queries is this:

WHERE u.block=0 AND u.id AND ( ( s.thread IS NOT NULL AND u.gid IN (24,23,25,30) ) ... )

Can you look at jos_users: what is GID from user 74 and 149?

Edit: GID's as real groups: Public Backend, Manager, Administrator, Super Administrator

I think I know where the issue is..

Last edit: 16 years 1 month ago by Matias.

Please Log in or Create an account to join the conversation.

Trouble
Offline
Junior Member

16 years 1 month ago - 16 years 1 month ago #43637 by Trouble

Replied by Trouble on topic Re:Kunena 1.5.10 Withdrawn, unofficial Kunena 1.5.10-2 HOTFIX

Matias wrote:

I now see the problem.

The main difference between those two queries is this:

WHERE u.block=0 AND u.id AND ( ( s.thread IS NOT NULL AND u.gid IN (24,23,25,30) ) ... )

Can you look at jos_users: what is GID from user 74 and 149?

Edit: GID's as real groups: Public Backend, Manager, Administrator, Super Administrator

I think I know where the issue is..

Yay!

UID 74 has GID 19! (User has the user level "Author")

UID 149 has GID 18! (User has the user level "Registered")

On my Joomla installation:

GID 18 is associated with the user level Registered
GID 19 is associated with the user level Author
GID 20 is associated with the user level Editor
GID 21 is associated with the user level Publisher
GID 24 is associated with the user level Administrator
GID 25 is associated with the user level Super Administrator

Last edit: 16 years 1 month ago by Trouble.

Please Log in or Create an account to join the conversation.

Time to create page: 0.391 seconds