Forum: Pixelpost Help
05-02-2006, 01:12 PM
|
|
Replies: 1
Views: 706
SQL Schema reference?
Is there a reference for what the SQL schema is supposed to be for Pixelpost? 1.5beta1 failed to run some ALTER TABLES commands (then with PHP 5.1.1 and MySQL 5.0.16; we've upgraded since to track...
|
Forum: Bug Report 1.4.x
11-02-2005, 10:12 PM
|
|
Replies: 6
Views: 2,660
On a related note, ampersands in image titles...
On a related note, ampersands in image titles break the feed as well.
Observed at http://www.visualacuity.net/photos/index.php?showimage=122 (which is NOT mine; I'd just can't add the feed to my...
|
Forum: Bug Report 1.4.x
10-01-2005, 10:32 PM
|
|
Replies: 10
Views: 3,794
|
Forum: Bug Report 1.4.x
09-30-2005, 01:21 PM
|
|
Replies: 10
Views: 3,794
Security reporting guidelines? Development source?
I believe I have found a security issue in Pixelpost. While I've checked the current release version (1.4.2), I assume much work has gone into the next version already, and it would be nice to check...
|
Forum: Bug Report 1.4.x
08-27-2005, 01:04 PM
|
|
Replies: 1
Views: 1,387
XSS in EXIF data?
Cedric Cochin recently posted to the BugTraq mailing list about the possibility of cross-site scripting (XSS) by uploading an image with malicious EXIF data embedded to various PHP image galleries....
|
Forum: Bug Report 1.4.x
07-08-2005, 12:05 PM
|
|
Replies: 3
Views: 1,152
So the correct fix is to keep sql_query() as...
So the correct fix is to keep sql_query() as such, and instead throw out the if(...) around it and the else { ... } block? Because sql_query() is already killing us on failure and not returning...
|
Forum: Bug Report 1.4.x
07-07-2005, 01:24 PM
|
|
Replies: 3
Views: 1,152
Second password recovery bug
I apologize if there's been a release since 1.4.1 which fixes this--1.4.1 was the last one I noticed was out.
admin/index.php line 87 reads:
if(sql_query($query))
That should be...
|