https://www.cotonti.com/pastebin/223

Members can clear pastebin codes

https://www.cotonti.com/pastebin/del-223

Добавлено 1 неделя спустя:

Fixed with c563c6. Please test it.

I have donwloaded Cotonti from Github for test with a Fresh install

There is an error in the plugin Search. When you selected the option 'Custom range'

2015-11-20 11:46

SQL error 42000: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND page_date <= AND (page_title LIKE '%1234%' OR page_desc LIKE '%1234%' OR pa' at line 3

#0  cot_diefatal(SQL error 42000: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND page_date <=  AND (page_title LIKE '%1234%' OR page_desc LIKE '%1234%' OR pa' at line 3) called at [C:\EasyPHP\data\localweb\fresh\system\database.php:574]
#1  CotDB->query(SELECT SQL_CALC_FOUND_ROWS p.* 
                FROM cot_pages AS p 
                WHERE page_cat IN ('articles','events','news') AND page_state = 0 AND page_cat <> 'system' AND page_begin <= 1448019962 AND (page_expire = 0 OR page_expire > 1448019962) AND page_date >=  AND page_date <=  AND (page_title LIKE '%1234%' OR page_desc LIKE '%1234%' OR page_text LIKE '%1234%')
                ORDER BY page_date ASC
                LIMIT 0, 50) called at [C:\EasyPHP\data\localweb\fresh\plugins\search\search.php:290]
#2  include(C:\EasyPHP\data\localweb\fresh\plugins\search\search.php) called at [C:\EasyPHP\data\localweb\fresh\system\plugin.php:94]
#3  require_once(C:\EasyPHP\data\localweb\fresh\system\plugin.php) called at [C:\EasyPHP\data\localweb\fresh\index.php:172]

Is it a base install of 0.9.18 or it had been updated from previous versions?

So check

1. the «Count Administrators' hits» option in Page module settings. And test it with both off and on option.
2. look at your DB and check «page_count» field defenition in `cot_pages` table. It should be: `page_count` mediumint(8) unsigned default '0'

Page view count

When I create a new page it instantly has a radom amount of hits even tho I am the only one who has viewed/just created that page

Please provide more info:

• Cotonti & plugin versions you are use
• What hits you do you mean — page views count (viewed as «hits» on edit form) or some statistics for `Hits` plugin?

when I add fields for ratings {PAGE_RATINGS_DISPLAY} {PAGE_RATINGS_AVERAGE} {PAGE_RATINGS_COUNT} they appear in the page and it works but when I try to delete an already active vote, I have an error message : AJAX error: [object Object]

I also tested on a fresh install

I wonder how can I have in forums both HTML and bbcode style smilies parser?
In current build smilies aren't parsed even if bbcode plugin is turned on. "parse smilies" setting is turned on. What else should I do?

Also, embedding of youtube doesn't work, how can I add it to htmltidy so that it gets parsed and not removed? :)

Yes, I downloaded Cotonti 0.9.18.1, from this site.
However the commit you have linked seems to be entirely different than the tags.php file in the Official 0.9.18.1 zip file - is it some kind of a future build?

I'll try to remind myself the Github password, thanks :)

There's a bug in plugins/tags/tags.php. SQL query error... Somebody forgot to define global $maxperpage in functions cot_tag_search_forums() and cot_tag_search_pages(). It works after putting it there.(wouldn't it be good to move these functions to a file in inc folder?)

There's also a bug in ratings ajax but haven't discovered how to fix it yet. I'm setuping a new site right now so it's a matter of time I guess... 

Moving on... :)

post a copy of `phpinfo();`

I solved the problem :)

@Gökhan ; sorunu hallettim hacı no prooblem yani :) hatta yukarda anlatım nasıl çözüldüğünü.

(I am using WHM)

Edit; HomeHome »Software »EasyApache (Apache Update)

mbstring: enabled, and, disabled_functions = glob: delete

Added 2 days later:

maybe its not neccessary, i realized I didn't have debug enabled in the config liek i thought i did, thats an easier way, the global tags tho... should be able to pull them up the same way as the other tags without embedding them on the page

I've just found an annoying reproducible bug.

If your site has an extra field and you want to change the default sort order for a category (Admin Panel > Structure > [entry] Config). Selecting a new item from the Sorting Column (which will list your extra field(s)) list field and hitting Update will result in:

The extra field will fail to parse (site-wide!) and the Sorting Column will now NOT include the extra field(s). My temporary solution after re-sorting a category was to then go to Admin Panel > Other > Extra Fields and simply hit 'Update'. This restores the parsing of the extra fields.

I've left putting this bug report on GitHub until someone else can reproduce it.

This is probably why our news section is screwed.

I am going to do what you suggested in the other thread for upgrading, wish me luck I hope we can get this to siena today.

and we are , since yesterday at least running 6.25, the footer of our wesite says 6.22 but that was hand typed there, is there another place in admin panel where I can see the version? I dropped the files for 6.25 in the root and as well as ran the sql for the upgrade, i updated one by one from 6.22 btw, and when i ran the sql they said some things already existed which led to believe we already updated.

anyways we will proceed with the siena update, is there anything I should do to fix this hack before i update to siena?

It seems like your site got hacked. It seems to be running 0.6.22 and there were a few security flaws reported since that release so I recommend updating to 0.6.25 as soon as possible and then setting a comfortable schedule to upgrade your site to Siena, because Genoa support will soon be over.

I have had a pretty big problem recently when out of nowhere, our news feed went missing, completely invisable. It seems like the tag parsed but isn't outputting the news feed articles on home page.

So I looked around and I found a random user was setting permisions , but is it true? or is this a bug in the admin panel?

http://i43.tinypic.com/15dmbgk.jpg

This user is not a moderator or administrator and only had "user" rghts, which don't let you edit any content on the site.

Now I see under other sections this user is listed under the "set by" colum for user rights on the news cat too... WTF???

Anyone have this issue? Because of this I was trying to just upgrade from Genoa all together to Siena, which went HORRIBLY, the upgrade script just wasn't working. If you can help me on this issue, or the upgrade issue, or think the issues could be related, that is awesome let me know.

my other topic regarding update issue. http://www.cotonti.com/forums?m=posts&q=7593&n=last#bottom

Interesting read about HTML5 security :)

http://w3af.org/understanding-html5-security

High-Tech Bridge Security Research Lab has discovered a security vulnerability in Cotonti version 0.9.13.

Preview available here: https://www.htbridge.com/advisory/HTB23164

Developers can contact us by email advisory (at) htbridge.com for details.

For any questions related to this notification message - please visit our General Information & Disclosure Policy page: https://www.htbridge.com/advisory/disclosure_policy.html

Best regards,

High-Tech Bridge Security Research Lab