Notice

The forum is in read only mode.

Support Forum

Welcome! Support Forums have been reactivated
Welcome the Technical Support section. Help us in assisting you by providing us with a concise and descriptive elaboration of your issues. Be specific and if possible, provide us with a step-by-step instruction in replicating your problem.

Profile View - Security Issue

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

this is rare issue, not sure caused by SEF or not.. actually the system cannot get the passing paramater from the views to the library.. so I managed to add the GET request manually form the library.. if this issue is still happening in next release just let me know but i check this in newest code everything is working fine

10 years 2 months ago
Licenses:
JomSocial Expired

Thanks for your information. Let's see how it works in 3.2, quite exciting for this new release.

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

You're welcome, we do lot of improvment on the sharebox feature... i hope it will me you "wow" :)

10 years 2 months ago
Licenses:
JomSocial Expired

Hi I've just updated to 3.1.1 and found the issue come back again. Can you tell me where to edit or you can just send me the edited file then I can upload myself also. Thanks .

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

Ehm.. please try this solution :

1. open this file components/com_community/helpers/access/profile.php
2. add this code :

$userId = $jinput->get->get('userid', '', 'INT');
3. above this code :
$viewer = CFactory::getUser($userid);

10 years 2 months ago
Licenses:
JomSocial Expired

I am having a blank screen while trying to view my own profile and others profile, i mean a blank screen for all user profile screen. Do I need to add anything else?

/**
	 * Return true if the user can view the given profile
	 * @param type $asset
	 * @param type $assetObject
	 *
	 */
	static public function profileView($userid, $asset, $user)
	{
		// Now I have to comment it out again sine not working
                // $userId = $jinput->get->get('userid', '', 'INT');
		$viewer = CFactory::getUser($userid);

10 years 2 months ago
Licenses:
JomSocial Expired

I have below error message while checking apache log:
I guess something wrong with the code ... I tried both jinput and input both not working.

Fri Mar 14 12:37:30 2014] [error] [client IP.x.x.x] PHP Notice:  Undefined variable: jinput in /Jfolder/components/com_community/helpers/access/profile.php on line 44, referer: http://www.mydomain.com/main/zh/community/pages
[Fri Mar 14 12:37:30 2014] [error] [client IP.x.x.x] PHP Notice:  Trying to get property of non-object in /Jfolder/components/com_community/helpers/access/profile.php on line 44, referer: http://www.mydomain.com/main/zh/community/pages
[Fri Mar 14 12:37:30 2014] [error] [client IP.x.x.x] PHP Fatal error:  Call to a member function get() on a non-object in /Jfolder/components/com_community/helpers/access/profile.php on line 44, referer: http://www.mydomain.com/main/zh/community/pages

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

oh ya i forget, please add this code above it:

$mainframe = JFactory::getApplication();
        $jinput = $mainframe->input;

10 years 2 months ago
Licenses:
JomSocial Expired

It's seems not working but this time no error message from apache. Other member still can see restricted user profile.
um... anything still missing? ^^

/**
	 * Return true if the user can view the given profile
	 * @param type $asset
	 * @param type $assetObject
	 *
	 */
	static public function profileView($userid, $asset, $user)
	{
		//  site customize - Check user profile correctly (a fix from JS)
		$mainframe = JFactory::getApplication();
                $jinput = $mainframe->input;
		$userId = $jinput->get->get('userid', '', 'INT');
		// customize end
		$viewer = CFactory::getUser($userid);

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

owh.. typo there please user $userid not $userId

10 years 2 months ago
Licenses:
JomSocial Expired

Um.... seems same result. anything still missing?

Now the code like this:

static public function profileView($userid, $asset, $user)
	{
		//  site customize - Check user profile correctly (a fix from JS)
		$mainframe = JFactory::getApplication();
		$jinput = $mainframe->input;
		$userid = $jinput->get->get('userid', '', 'INT');
		// customize end
		$viewer = CFactory::getUser($userid);

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

Hi There,

I am sorry for delay asnwer.. ehm.. I need check the code directly.. but now I cant access the FTP account, can you verify it please?

thank you

10 years 2 months ago
Licenses:
JomSocial Expired

I have updated the FTP info into the #1 post, please check.

p.s. I have limited your access to the only component/com_community folder. with full access right.

Once you have completed your modification, please also let me know which part you have modified so I can backup and try myself in next release. Thanks a lot.

10 years 2 months ago
  • Dimas Tekad Santosa's Avatar
  • Dimas Tekad Santosa
  • Visitor
  • Thank you received: 0
Licenses:

Hi,

I cannot use / download your file via FTP .. I get this :

REMOVED

Moderators: Piotr Garasiński
Powered by Kunena Forum

Join 180,000 websites creating Amazing communities

JomSocial is the most complete, easy-to-use addon that turns Joomla CMS into a
full -fledged, social networking site

TRY NOW BUY NOW