Downloads detail Error

Nuke Soldier Joined: Jan 14, 2003 Posts: 16 Location: USA

hi,
i don't know if anyone have the same problem or not
but when i added a download in the download section i type the title in 2 difrent langages like ( english + japanies )
if i click on details it gives me a white page and "I Don't like you" messege Confused

so anyone knows anything about it ?!

Nuke Soldier Joined: Jan 14, 2003 Posts: 16 Location: USA

also the rate this program is not wroking !!

Joined: Jan 31, 2004 Posts: -88

ok, I've just spent half hour playing with my site, and I cant' see your problem

The downloads take their details from the SQL database, not a language file, so the language isn't the problem.

Could you give us a little more detail about the problem please? Start by enabling debugging modes on nuke by following the instructions layed out here and posting any errors you get.

Ur using Nuke 6.5 aren't u? Can u give us some details about the server you're running it on?

ArtificialIntel

Posted: Wed Jan 15, 2003 6:31 am

The I don't like you message will usually appears when certain symbols are part of the url, if for instance i have a download whose title is Impressum, when i click on details the url will be:

Code:

http://www.nukeresources.com/modules.php?name=Downloads&d_op=viewdownloaddetails&lid=384&ttitle=Impressum

This will be ok with PHP-Nuke, but if i had named the file [Impressum] then the details url would be:

Code:

http://www.nukeresources.com/modules.php?name=Downloads&d_op=viewdownloaddetails&lid=384&ttitle=[Impressum]

which would give me the I don't like you message when clicked, these symbols are defined in mainfile.php near the top, usually around the third paragraph:

Code:

foreach ($HTTP_GET_VARS as $secvalue) {
if ((eregi("<[^>]*script*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*object*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*iframe*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*applet*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*meta*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*style*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*form*\"?[^>]*>", $secvalue)) ||
(eregi("<[^>]*img*\"?[^>]*>", $secvalue)) ||
(eregi("$[^>]*\"?[^)]*$", $secvalue)) ||
(eregi("\"", $secvalue))) {
die ("I don't like you...");
}
}

What could be done is remove these symbols from this code. For the example i gave i'd remove all instances of [ and ].

Nuke Cops Founder Joined: Nov 14, 2002 Posts: 5939

And that's my fault [benefit]. If you remove any of those lines, you risk opening yourself up to some cross site scripting (XSS) hacks.

Posted: Wed Jan 15, 2003 9:39 am

That is the case but kids running game/clan sites usually do it without considering the risks because to some, being able to have |33t nicks and filenames is beyond any security risk. Rolling Eyes

Nuke Soldier Joined: Jan 14, 2003 Posts: 16 Location: USA

Thanks for clearing that out

It was fixed when i just removed the ( ) from the word and replaced it with _
i think the problem will also ocurrs if i use the [ ]

all i have is to just use _ insted of the brakets ^_^

Thanks again guys for your help