×
Kunena 5.2.6 released and Blue eagle 1.6.6 released (25 Jul 2021)

The Kunena team has announce the arrival of Kunena 5.2.6 [K 5.2.6] which is now available for download as a native Joomla extension for J! 3.9.x. This version addresses most of the issues that were discovered in K 5.2 and issues discovered during the development stages of K 5.2.6

×

Please Read This First:


Please read the guides posted as sticky topics in this category. For a quicker response, please give as much information to help us understand the problem (see How To Ask Questions The Smart Way and What information should I include when I ask for help (including how to post my configuration report)? ).

This category is only for reporting defects with K 2.0 Please read, before you post, Before you post your question, read this first .

Do not use this category:
  • if this website (www.kunena.org) works but works differently to how you expected
  • for requests to add or remove the standard features of Kunena;
  • for questions commonly asked or "how to" in nature (see the FAQs menu tab above);
  • for help with Kunena versions that are not the latest stable release; or
  • for general Joomla or website administration matters

You must include your K 2.0 configuration report; if you do not include your configuration report, your topic may be closed (locked) or deleted without any further warnings from the moderators.

K 2.0 support will cease on 31 August 2013 and this section of the forum will be closed and archived after that time and no further questions will be answered about this version.

Important Security: Search option exposes account login data

More
8 years 4 months ago #11 by Winuser
NEVERMIND: I found the code block nested within a div, in the following file:

component\kunena\template\...\html\search\default.php

If anyone needs the same modification, just search for the COM_KUNENA_SEARCH_SEARCHBY_USER language variable and you'll find the code segment to delete (look for the opening and closing DIV tags).

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago - 8 years 4 months ago #12 by coder4life

Your reasoning that there is no security issue because only MEMBERS can access another member's login credentials is absurd.

Login Name vs. Display Name <<<---This is the reality that you keep denying. SMF, for instance, fully supported this distinction; but it didn't allow security lapses. If the forum was configured to publish display names, then no member would ever see the login name of another member.

I know full well that Kunena's problems trace back to Fireboard. If after several posts you still don't get the fundamental problem here, then I can only wait for another user to explain it better, because obviously I have not.


We do no consider the view ability of login names instead of a display name as a security vulnerability. I can agree this could be a security issue, but limited to scope based on the purpose and reason of individual websites where seeing login name could have consequences (even in closed environment controlled by account registration). There is no such concept as display name in Joomla, as such Kunena does not provide this configuration ability out of the box. I myself have proposed to offer a display name alternative (especially where names would be temporary like on a gaming community). Really this is a feature request, and will be considered as such. This is an issue with Joomla as a whole and not specific to Kunena. And no I am not pointing fingers, Joomla or Kunena can both offer a solution, but this improvement would make more sense coming from Joomla to be consistent across other components. As such I do not think that its fair to point this as a Kunena software "problem". The software works as intended with the thought out intention of working closer to Joomla.
Last edit: 8 years 4 months ago by coder4life.

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago - 8 years 4 months ago #13 by Matias
Just a side note: the search bug (showing wrong field) was fixed about two weeks ago, so it is already in the latest K3.0 beta release.
Last edit: 8 years 4 months ago by Matias.

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago #14 by Winuser
Ok, but when users contribute bug reports and issues on series 2.x.x, your fixes should (also) be available on a series 2.x.x. update.

Series 3 is in beta, and I am assuming there is no pure template compatibility from 2 to 3. Is this correct?

More to the point, K3.0 beta is functionally meaningless for the present time because it's BETA. After upgrading to series 2 earlier this year, I then had to pay for a premium template--because we all know Kunena's template options are seriously lacking. You guys may be ready for K3.0, but have you considered the larger community?

Don't forget series 2 too quickly. This all reminds me of the Windows 8 release when everyone was quite happy and productive with Windows 7.

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago - 8 years 4 months ago #15 by xillibit

Ok, but when users contribute bug reports and issues on series 2.x.x, your fixes should (also) be available on a series 2.x.x. update.

Series 3 is in beta, and I am assuming there is no pure template compatibility from 2 to 3. Is this correct?

Hello,

In Kunena 3.0 we had removed Joomla! 1.5 support and the others things are just bug fixes, so there is no big differences between Kunena 2.0 and 3.0, the database schema is the same between two versions...

On Kunena 3.0 you can install templates from Kunena 2.0, there will be no differences with third party templates on Kunena 3.0 and during Kunena 3.0 developpement we have checked to keep compatbility with Kunena 2.0 templates.

Don't forget series 2 too quickly. This all reminds me of the Windows 8 release when everyone was quite happy and productive with Windows 7.

That's is uncomparable we haven't changed completly the UI, like it has been done in Windows 8

I don't provide support by PM, because this can be useful for someone else.
Last edit: 8 years 4 months ago by xillibit.

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago #16 by Jiminimonka

Ok, but when users contribute bug reports and issues on series 2.x.x, your fixes should (also) be available on a series 2.x.x. update.

Series 3 is in beta, and I am assuming there is no pure template compatibility from 2 to 3. Is this correct?

More to the point, K3.0 beta is functionally meaningless for the present time because it's BETA. After upgrading to series 2 earlier this year, I then had to pay for a premium template--because we all know Kunena's template options are seriously lacking. You guys may be ready for K3.0, but have you considered the larger community?

Don't forget series 2 too quickly. This all reminds me of the Windows 8 release when everyone was quite happy and productive with Windows 7.


You are welcome to contribute your technical skills on GitHub.

Please read the FAQ.
Only one question per topic.
Search before you ask a question.

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago #17 by Matias
Unfortunately currently we don't have enough resources to maintain two versions at the same time, which basically means that there will not be updates on Kunena 2.0 series anymore (official Joomla! 1.5 support was dropped a few months ago with the 2.0.4 release).

We are going to release Kunena 3.0.0 RC1 today and in about a week the stable version. Kunena 3.0 should be 99% backwards compatible with Kunena 2.0, which means that most templates, modules and plug-ins should work out of the box as long as they support the Joomla! version you're running on.

Help us to ensure that there are no bugs to prevent you from upgrading when we release the stable version. You can do that by making a copy of your site to another sub-domain, upgrade Kunena (only) and play with it.

Please Log in or Create an account to join the conversation.

More
8 years 4 months ago #18 by sozzled

Don't forget series 2 too quickly.

I'm looking forward to forgetting about K 2.0 as quickly as possible and moving forward with K 3.0! :woohoo:
The following user(s) said Thank You: Shimei

Please Log in or Create an account to join the conversation.

  • Not Allowed: to create new topic.
  • Not Allowed: to reply.
  • Not Allowed: to edit your message.
Time to create page: 0.116 seconds