Question BUG Report Kunena Latest 1.7.1

[email protected]

So I had this problem with Kunena Latest 1.7.0 and thought it would be solved in the 1.7.1 version but it seems not.

If a user insert his email in the first sentences / signs, wich is activated in the modul than the complete template is destroyed.

If I deactivate the modul everything is ok.
If I change the the email from [email protected] to email @ test.com than it works too...

Infact means, that everxbody can destroy your forum... Or is it a problem between my template an Kunena?

Greetings
litho

p.s. the email above is still for testing if I could destroy the template

Is here anywhere kunena letest installed with more than the headline?
Just to see if I could destroy the template here as well...

[email protected]

No. I could not reproduce the issue here at this site.

[email protected]

Hi sozzled,

I still have seen it on the playground, and could not repeat the problem
This morning I had user who has done it again. So far as the email appears as link (mail to), which happens automatically, so far as the system recognized it as email...
Where can I turned of the function?

greetz
litho

Ok just test it again here in playground...
The [email protected] doesn't appears as email to click. thats why you cann't repat the error.
Where is this function define? CSS?

Greetings
litho

I do not understand how the string of characters [email protected] can "destroy" a person's website, as you claimed in your opening message. We can't reproduce the problem here at www.kunena.com . Would you like to show us how we can see the problem, please?

OK sorry for christmas break. I hope you all got a very good Christmas !!

Attached you will find 3 pics.

1st I wrote a thread in my forum with free space before and after the @ sign. You see everthing is ok. You see some more threads in the Kunena latest box below.

2nd I deleted the space. You see in the tread the email appears as an email you can click. Below is the kunena latest modul. All sings included the email are away, all the following threads too.

3rd you see a screenshoot from the front page. Same problems here in kunena latest (there should be the last 5 forum threads) plus the modulboxes comes from the right side under the mainpage.

That all doesn't happend here in the playground, because the forum doesn't recognized the email as email. Where can I turned it off? Or how can I fix this bug?

Any more questions? I'll be online.

Greetings
litho

Thank you for the pictures. I still can't see how to reproduce the problem here at this website, www.kunena.org . So, I will ask you again, where is the "bug"? Can you please give us your configuration report?

litho wrote:

I had this problem with Kunena Latest ... if a user inserts his email in the first sentences ... than the complete template is destroyed. [This] means that everybody can destroy your forum.

litho wrote:

I ... have seen it on the playground

litho wrote:

This doesn't happen here in the playground because the forum doesn't recognise the email as email.

We need to understand how anyone can destroy your website, our website or any website in the way you have described. I cannot reproduce the problem here at this website - I have tried - so this makes me wonder what is different about www.kunena.org and wherever it is that you are having the problem. Your configuration report may help us to understand more about the problem.

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Disabled |

This message contains confidential information

htaccess: Exists | PHP environment: Max execution time: 60 seconds | Max execution memory: 72M | Max file upload: 24M

Joomla default template details : yoo_explorer | author: YOOtheme | version: 1.5.3 | creationdate: January 2010

Kunena default template details : Blue Eagle (default) | author: Kunena Team | version: 1.7.0 | creationdate: 2011-08-29

Kunena version detailled: Installed version: 1.7.0 | Build: 5135 | Version name: Tale | Kunena detailled configuration:

Warning: Spoiler!

[th]Kunena config settings:[/th]

board_title	Snookermania
board_offline	0
board_ofset	0
offline_message	<h2>Das Forum ist derzeitig aufgrund von Wartungsarbeiten offline.</h2>
enablerss	1
enablepdf	1
threads_per_page	20
messages_per_page	10
messages_per_page_search	15
showhistory	1
historylimit	6
shownew	1
jmambot	1
disemoticons	0
template	default
showannouncement	1
avataroncat	1
catimagepath	category_images/
showchildcaticon	1
annmodid	62,66
rtewidth	450
rteheight	300
enableforumjump	1
reportmsg	1
username	0
askemail	1
showemail	0
showuserstats	1
showkarma	1
useredit	1
useredittime	0
useredittimegrace	600
editmarkup	1
allowsubscriptions	1
subscriptionschecked	1
allowfavorites	1
maxsubject	50
maxsig	300
regonly	0
changename	0
pubwrite	0
floodprotection	0
mailmod	0
mailadmin	0
captcha	1
mailfull	1
allowavatar	1
allowavatarupload	1
allowavatargallery	1
avatarquality	85
avatarsize	2048
allowimageupload	0
allowimageregupload	1
imageheight	800
imagewidth	800
imagesize	150
allowfileupload	0
allowfileregupload	1
filetypes	zip,txt,doc,gz,tgz,pdf
filesize	500
showranking	1
rankimages	1
avatar_src
fb_profile
pm_component
userlist_rows	30
userlist_online	1
userlist_avatar	1
userlist_name	1
userlist_username	1
userlist_posts	1
userlist_karma	1
userlist_email	0
userlist_usertype	0
userlist_joindate	1
userlist_lastvisitdate	1
userlist_userhits	1
latestcategory	0
showstats	1
showwhoisonline	1
showgenstats	1
showpopuserstats	1
popusercount	5
showpopsubjectstats	1
popsubjectcount	5
usernamechange	0
rules_infb	0
rules_cid	0
help_infb	0
help_cid	0
showspoilertag	1
showvideotag	1
showebaytag	0
trimlongurls	1
trimlongurlsfront	40
trimlongurlsback	20
autoembedyoutube	1
autoembedebay	0
ebaylanguagecode	en-us
fbsessiontimeout	4800
highlightcode	0
rss_type	topic
rss_timelimit	month
rss_limit	100
rss_included_categories
rss_excluded_categories
rss_specification	rss2.0
rss_allow_html	1
rss_author_format	name
rss_author_in_title	1
rss_word_count	0
rss_old_titles	1
rss_cache	900
fbdefaultpage	categories
default_sort	asc
alphauserpointsnumchars	0
sef	1
sefcats	0
sefutf8	0
showimgforguest	0
showfileforguest	0
pollnboptions	4
pollallowvoteone	1
pollenabled	0
poppollscount	5
showpoppollstats	1
polltimebtvotes	00:15:00
pollnbvotesbyuser	100
pollresultsuserslist	1
maxpersotext	50
ordering_system	mesid
post_dateformat	ago
post_dateformat_hover	datetime
hide_ip	1
js_actstr_integration	0
imagetypes	jpg,jpeg,gif,png
checkmimetypes	1
imagemimetypes	image/jpeg,image/jpg,image/gif,image/png
imagequality	50
thumbheight	32
thumbwidth	32
hideuserprofileinfo	put_empty
integration_access	joomla
integration_login	joomla
integration_avatar	kunena
integration_profile	kunena
integration_private	uddeim
integration_activity	none
boxghostmessage	0
userdeletetmessage	0
latestcategory_in	1
topicicons	1
onlineusers	1
debug	0
catsautosubscribed	0
showbannedreason	0
version_check	1
showthankyou	1
showpopthankyoustats	1
popthankscount	5
mod_see_deleted	0
bbcode_img_secure	text
listcat_show_moderators	1
lightbox	1
activity_limit	0
show_list_time	720
show_session_type	1
show_session_starttime	120
userlist_allowed	0
userlist_count_users	1
enable_threaded_layouts	0
category_subscriptions	post
topic_subscriptions	every
pubprofile	1
thankyou_max	10
email_recipient_count	0
email_recipient_privacy	bcc
email_visible_address
captcha_post_limit	0
recaptcha_publickey	6LfTdssSAAAAANfqnLx3QVQGT-enhll2AXzxdg6r
recaptcha_privatekey	6LfTdssSAAAAAJLhKPglzSafuYwdu7Ge8Mc43hLP
recaptcha_theme	white

Third-party components: AlphaUserPoints 1.5.13 | CommunityBuilder 1.3.1 | UddeIm

Third-party SEF components: None

Plugins: System - Mootools Upgrade: Enabled | System - Mootools12: Disabled

Modules: Kunena Latest 1.7.1 | Kunena Stats 1.7.0 | Kunena Login 1.7.0 | Kunena Search 1.7.0

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Disabled |

This message contains confidential information

htaccess: Exists | PHP environment: Max execution time: 60 seconds | Max execution memory: 72M | Max file upload: 24M

Joomla default template details : yoo_explorer | author: YOOtheme | version: 1.5.3 | creationdate: January 2010

Kunena default template details : Blue Eagle (default) | author: Kunena Team | version: 1.7.1 | creationdate: 2011-11-16

Kunena version detailled: Installed version: 1.7.1 | Build: 5162 | Version name: UnderUret | Kunena detailled configuration:

Warning: Spoiler!

[th]Kunena config settings:[/th]

board_offline	0
board_ofset	0
enablerss	1
enablepdf	1
threads_per_page	20
messages_per_page	10
messages_per_page_search	15
showhistory	1
historylimit	6
shownew	1
jmambot	1
disemoticons	0
template	default
showannouncement	1
avataroncat	1
catimagepath	category_images/
showchildcaticon	1
annmodid	62,66
rtewidth	450
rteheight	300
enableforumjump	1
reportmsg	1
username	0
askemail	1
showemail	0
showuserstats	1
showkarma	1
useredit	1
useredittime	0
useredittimegrace	600
editmarkup	1
allowsubscriptions	1
subscriptionschecked	1
allowfavorites	1
maxsubject	50
maxsig	300
regonly	0
changename	0
pubwrite	0
floodprotection	0
mailmod	0
mailadmin	0
captcha	1
mailfull	1
allowavatar	1
allowavatarupload	1
allowavatargallery	1
avatarquality	85
avatarsize	2048
allowimageupload	0
allowimageregupload	1
imageheight	800
imagewidth	800
imagesize	150
allowfileupload	0
allowfileregupload	1
filetypes	zip,txt,doc,gz,tgz,pdf
filesize	500
showranking	1
rankimages	1
avatar_src
fb_profile
pm_component
userlist_rows	30
userlist_online	1
userlist_avatar	1
userlist_name	1
userlist_username	1
userlist_posts	1
userlist_karma	1
userlist_email	0
userlist_usertype	0
userlist_joindate	1
userlist_lastvisitdate	1
userlist_userhits	1
latestcategory	0
showstats	1
showwhoisonline	1
showgenstats	1
showpopuserstats	1
popusercount	5
showpopsubjectstats	1
popsubjectcount	5
usernamechange	0
rules_infb	0
rules_cid	0
help_infb	0
help_cid	0
showspoilertag	1
showvideotag	1
showebaytag	0
trimlongurls	1
trimlongurlsfront	40
trimlongurlsback	20
autoembedyoutube	1
autoembedebay	0
ebaylanguagecode	en-us
fbsessiontimeout	4800
highlightcode	0
rss_type	topic
rss_timelimit	month
rss_limit	100
rss_included_categories
rss_excluded_categories
rss_specification	rss2.0
rss_allow_html	1
rss_author_format	name
rss_author_in_title	1
rss_word_count	0
rss_old_titles	1
rss_cache	900
fbdefaultpage	categories
default_sort	asc
alphauserpointsnumchars	0
sef	1
sefcats	0
sefutf8	0
showimgforguest	0
showfileforguest	0
pollnboptions	4
pollallowvoteone	1
pollenabled	0
poppollscount	5
showpoppollstats	1
polltimebtvotes	00:15:00
pollnbvotesbyuser	100
pollresultsuserslist	1
maxpersotext	50
ordering_system	mesid
post_dateformat	ago
post_dateformat_hover	datetime
hide_ip	1
js_actstr_integration	0
imagetypes	jpg,jpeg,gif,png
checkmimetypes	1
imagemimetypes	image/jpeg,image/jpg,image/gif,image/png
imagequality	50
thumbheight	32
thumbwidth	32
hideuserprofileinfo	put_empty
integration_access	joomla
integration_login	joomla
integration_avatar	kunena
integration_profile	kunena
integration_private	uddeim
integration_activity	none
boxghostmessage	0
userdeletetmessage	0
latestcategory_in	1
topicicons	1
onlineusers	1
debug	0
catsautosubscribed	0
showbannedreason	0
version_check	1
showthankyou	1
showpopthankyoustats	1
popthankscount	5
mod_see_deleted	0
bbcode_img_secure	text
listcat_show_moderators	1
lightbox	1
activity_limit	0
show_list_time	720
show_session_type	1
show_session_starttime	120
userlist_allowed	0
userlist_count_users	1
enable_threaded_layouts	0
category_subscriptions	post
topic_subscriptions	every
pubprofile	1
thankyou_max	10
email_recipient_count	0
email_recipient_privacy	bcc
email_visible_address
captcha_post_limit	0

Third-party components: AlphaUserPoints 1.5.13 | CommunityBuilder 1.3.1 | UddeIm

Third-party SEF components: None

Plugins: System - Mootools Upgrade: Enabled | System - Mootools12: Disabled

Modules: Kunena Latest 1.7.1 | Kunena Stats 1.7.0 | Kunena Login 1.7.0 | Kunena Search 1.7.0