phpwcms Support Forum

Hello,

This thread should most definitely be moved to the Security alert forum as many others out there (that are also using spaw as a third party product) have already been hit through that vulnerability.

Regards,

Thanks for the suggestion pico. I am glad to see that this feature was enabled in 1.3.3. However, I can't seem to find where to put this config (i.e. where do you setup the loop/loop-pause vars)?

Thanks again for your most valuable assistance.

[EDITED]

OK. I saw the feature in the BE before ...

Hello all-

I have clients using phpWCMS (1.2.8 & 1.3.3.) with 1000+ subscribers for their Newsletters and I noticed that the script is sending all messages at once, causing a tremendous (I mean outrageously high!) load on the server. I use my own dedicated servers so I can manage the load but I ...

Hi:

I can not implement the nightly build just yet as my phpWCMS projects are all live.

I look forward to the new release !

Kind Regards,

Seb

Hello all:

Here is quick fix that worked for me when importing multiple users into different 'phpWCMS subscriptions' (v1.2. 8 ).

Although BLOB is not the most common format, I realized that the data was a simple array that was serialized before being added into the database...

BEFORE YOU START ...

Consider changing to see details in the following thread:

http://www.phpwcms.de/forum/viewtopic.php?t=13225

I am still waiting for a second opinion on this though... be careful!

Regards,

Seb

After much investigation, I found what was compromising the 'download.php'. In the 'dl_file_resume' function ('inc_lib/functions.file.inc.php'), where all the headers are written you will find the following code:

header("Accept-Ranges: bytes");

$size=filesize($file);
//check if http_range is ...

Hello Oliver,

As my tests were not conclusive with v126, I turned back to the 'download.php' v129pre that Oliver provided earlier and I noticed that it had a new way of processing the query string... As I did not install the complete overnight distro (pre129), I uploaded only 'download.php' and ...

After I changed all file permissions to 777 (in filestorage dir) and set the inline_download = 0, the original 'download.php' included in the 1.2.8 distro appear to be working just fine.... I'll run some more tests and I'll keep you guys posted.

Seb

Hello-

filestorage dir is 777 and all file in it are 644 (nobody:nobody). I tried 777 for all files and directories in filestorage without further success....

Is there anything else I missed ?

Hi-

All I get is "404 File Not Found"

seb

Hello Oliver,

I tried the file 'download.php' included into last spring's distro (v.1.2.6) and I get the following error message:

error while retrieving file download infos

Any other suggestion?

Seb

Any interim solution before the patch is out? The current version is unstable both on IE and FF...

Should we use 'download.php' from previous distro?

Seb

Hello all:

I just updated phpWCMS v1.1RC4 -> v1.2.8 and I lost my wysiwyg editor in the calendar module.

Any idea how to fix this?

Thanks in advance

seb

Dear all-

The inline config did not do it. Apparently this bug was fixed by Olivier and a new 'download.php' should be released soon:

http://www.phpwcms.de/forum/viewtopic.php?t=13225

seb