| Welcome, Guest |
You have to register before you can post on our site.
|
| Online Users |
There are currently 627 online users.
» 0 Member(s) | 625 Guest(s)
Bing, Google
|
| Latest Threads |
UserSpice Alpha Testing a...
Forum: News Center
Last Post: ivinsons
11-08-2024, 06:13 PM
» Replies: 13
» Views: 42,475
|
UserSpice 4.4 Development
Forum: News Center
Last Post: Amelie12
09-21-2024, 12:23 PM
» Replies: 4
» Views: 15,199
|
Welcome to the new UserSp...
Forum: News Center
Last Post: ivinsons
08-25-2024, 07:39 AM
» Replies: 2
» Views: 27,918
|
How to use hasPerm
Forum: UserSpice 4.4
Last Post: mudmin
07-20-2019, 02:45 PM
» Replies: 1
» Views: 13,755
|
Session issue? What I sho...
Forum: UserSpice 4.4
Last Post: Parth
07-17-2019, 05:06 PM
» Replies: 4
» Views: 14,502
|
Email Error
Forum: UserSpice 4.4
Last Post: Brandin
07-17-2019, 04:47 PM
» Replies: 1
» Views: 6,623
|
{ Missing Text } after up...
Forum: UserSpice 4.4
Last Post: Brandin
07-16-2019, 04:23 PM
» Replies: 22
» Views: 53,638
|
Best Practice Info
Forum: New to UserSpice?
Last Post: Brandin
07-16-2019, 11:55 AM
» Replies: 1
» Views: 13,490
|
Force to use 2FA -always-
Forum: UserSpice 4.4
Last Post: Brandin
07-12-2019, 12:43 PM
» Replies: 1
» Views: 6,636
|
e-mail not verifying
Forum: UserSpice 4.4
Last Post: LBC
07-10-2019, 11:34 AM
» Replies: 31
» Views: 76,232
|
|
|
| Names database-tables |
|
Posted by: c.l.f.wittmann@gmail.com - 09-13-2017, 04:48 PM - Forum: UserSpice 5 - Roadmapping the Future
- Replies (3)
|
 |
Hi,
I have an idea for an improvement of userspice. First of all: I really like userspice!!!
But I think it might be even better if you could change the names of the tables in the database. Is it maybe possible to give all of them a prefix like "us_". That would make it easier if you need to search for your own tables in phpmyadmin and sort them by table-names. I know this might be a lot of work as you probably use these table-names a lot in your php codes but I think it would make work a bit easier when you are using own tables.
Thanks in advance and again: thanks for userspice!!
Chris
|
|
|
|
| Make additional $user variables? |
|
Posted by: Katronix - 09-12-2017, 05:33 PM - Forum: UserSpice 4.3 and Below
- Replies (6)
|
 |
Hi all,
The script I'm working on, uses an Array of strings to be both in Spanish and English. (or at least the original script I'm converting to US does).
A couple of questions, I saw that US has its own multi-language section, can this be added on to?
If not, is it possible for me to turn an array such as $lang so that I could refer to element 15 and echo just $lang->15 without having to load the array in every file?
Hope these questions make sense,
Chris
|
|
|
|
| phpmailer 5.2.14 |
|
Posted by: palmeros - 09-12-2017, 10:54 AM - Forum: UserSpice 4.3 and Below
- Replies (3)
|
 |
Dont know if this is severe at all but i copied this from phpmailer's Github:
PHPMailer versions prior to 5.2.24 (released July 26th 2017) have an XSS vulnerability in one of the code examples, CVE-2017-11503. The code_generator.phps example did not filter user input prior to output. This file is distributed with a .phps extension, so it it not normally executable unless it is explicitly renamed, so it is safe by default. There was also an undisclosed potential XSS vulnerability in the default exception handler (unused by default). Patches for both issues kindly provided by Patrick Monnerat of the Fedora Project.
PHPMailer versions prior to 5.2.22 (released January 9th 2017) have a local file disclosure vulnerability, CVE-2017-5223. If content passed into msgHTML() is sourced from unfiltered user input, relative paths can map to absolute local file paths and added as attachments. Also note that addAttachment (just like file_get_contents, passthru, unlink, etc) should not be passed user-sourced params either! Reported by Yongxiang Li of Asiasecurity.
PHPMailer versions prior to 5.2.20 (released December 28th 2016) are vulnerable to CVE-2016-10045 a remote code execution vulnerability, responsibly reported by Dawid Golunski, and patched by Paul Buonopane (@Zenexer).
PHPMailer versions prior to 5.2.18 (released December 2016) are vulnerable to CVE-2016-10033 a remote code execution vulnerability, responsibly reported by Dawid Golunski.
|
|
|
|
| Version Control |
|
Posted by: Brandin - 09-11-2017, 12:23 AM - Forum: Off-topic Discussions
- Replies (2)
|
 |
Hello!
Does anyone here do version control with their projects? Release notes? Full-scale dev solutions? Would be interesting to know how you all push your updates.
With me: I am using bitbucket. I use Atom to do my coding (Was using Notepad++) and Sourcetree for my Commits. I test locally, on the live server, then push my updates to prod through a ZIP I make and upload. I have a script called "mydashupdater.php" that runs the queries I need to in it, and have my own version file in usersc/ which if the value in my database for SQL (setting called mydash_sql_ver) is less than the version file, an updater button pops up to bring you to the mydashupdater.php file which updates the SQL and the DB sql_ver.
I'll post a more elaborate piece to this - and reupload my screenshots since I have changed my system a lot since!
Looking forward to hearing everyone elses aspects around this!
|
|
|
|
|
