Univers BOX
Sur le Web

PunBB

The most recent topics at PunBB Forums.


Articles les plus récents

"Unable to confirm security token"

lundi 2 août 2010 par dummy@example.com (littlebigfred)

Hello

I'm getting the following error message from PunBB after including the familiar two lines in a script, after the user has already been authenticated by PunBB and received the forum_cookie_baf83f cookie:

Unable to confirm security token. A likely cause for this is that some time passed between when you first entered the page and when you submitted a form or clicked a link. If that is the case and you would like to continue with your action, please click the Confirm button. Otherwise, you should click the Cancel button to return to where you were.

This is actually a very simple play, with the following characters:

  • /blog/index.php

  • /blog/action.php

  • /punbb/login.php

A picture being worth a thousand words, here's the plan:

http://img838.imageshack.us/img838/8666 … nlogin.png

In other words, /blog/index.php uses PunBB's code to check if the user is logged on: If not, it calls /punbb/login.php, which, once the use is logged on, redirects the user back to /blog/index.php. So far, so good.

Next, /blog/index.php sees that the user is logged on, and displays a form with a single button "Subscribe/Unsubscribe"; The form calls /blog/action.php which includes just the two lines from PunBB:

define('FORUM_ROOT', '/var/www/nginx-default/punbb/');
require FORUM_ROOT.'include/common.php';

Here's the full code of index.php and action.php.

As you can see in the following HTTP log, when the user clicks on the Subscribe/Unsubscribe button to call action.php, for some reason, PunBB isn't happy and sends another cookie with Set-Cookie:

http://pastebin.com/jHJ4MprR

Does someone more experienced with web applications have an idea what the problem could be?

Thank you for any hint.


Simple BitTorrent Tracker

lundi 2 août 2010 par dummy@example.com (dimkalinux)

Fancy Tracker add simple tracker for your forum.

Need any jquery-1.3-provided extensions for work — for example this http://forum.lluga.net/jquery.tar.gz

local/cache-vignettes/L440xH357/screenshot1h5786-6aecc.png
local/cache-vignettes/L440xH233/screenshot2fc3aa-272d8.png
local/cache-vignettes/L440xH226/screenshot3p914b-5e6af.png

fancy_tracker.tar.gz — версия 0.8.18


[release] Hide your online status

lundi 2 août 2010 par dummy@example.com (kmbxxx)

Hello

This extension let users to hide their online status. Features:
-configurable group assign
-configurable flood protection* (per group)
-users can set their state in header (next to your username)
-hidden users can't post
-hidden moderators and administrators can post always
-hidden user can see himself on online list
-moderators and administrators can see all hidden users on online list (grayed/css)

* - flood protection is for unable users to be hidden all the time, and show just for couple seconds to post.

Version 1.0
hide_online_1.0.zip


[release] Moderator group assignment

lundi 2 août 2010 par dummy@example.com (KeyDog)

Hello

This extension let moderators to set users group. It is configurable in admin' group panel.
Now you don't need to assign someone as admin to let him change users group. You can even set which groups can he change.

You need two steps to configure it.
1. Set "Allow moderators to set users group."
Because moderator will be able to change group only in user profile, you need to set "Allow moderators to edit user profiles." too**.
local/cache-vignettes/L440xH104/mod1fs8jpg-99777-71807.jpg


2. Assign (at least two) groups which you want to be settable by moderator - "Moderator can set this group."
local/cache-vignettes/L440xH138/mod2wa2jpg-33110-6392d.jpg
(moderators will be able to change from/to group which are selected here ONLY)


** - Because I found a bug in users.php, I didn't add this feature to that place yet.

Version 1.0
moderator_group_set_1.0.zip


No announcement for logged users

lundi 2 août 2010 par dummy@example.com (Audiofeeline)

Hi all!
I use "announcement" to display ads but I would to find something to hide it for logged users.
Is there a way to hide "announcement" for those?
Thanks!


Personal Bbcode

lundi 2 août 2010 par dummy@example.com (Audiofeeline)

Hi !
Many people using plugin just for adding new Bbcodes like [video] or [mp3], can't we add a PunBB feature that add new Bbcode. I think I saw that in PhpBB but I'm not sure.
What do you think about?


Custom page

lundi 2 août 2010 par dummy@example.com (Audiofeeline)

Hello every one. I'm trying to make a custom page. But i don't get it how to. I want create .php file, but i don't know how to integrate header, announce, statistics and footer.

I mean:

1. Header
2. Announce
3. My Text
4. Statistics
5. Footer


Sorry for bad english.


[SOLVED] Getting username from $_SESSION?

lundi 2 août 2010 par dummy@example.com (littlebigfred)

Hello

If I understood how things work, from a different application, once the user has logged on using PunBB's authentication code, the browser received a cookie that matches the session ID that was created for him, and $_SESSION[] contains information put there by PunBB.

I need to read "username" for the current user, but looping through the array returns nothing:

foreach ($_SESSION as $key => $value){
  print sprintf("%s = %s<p>\n",$key,$value);
}

Do I really need to include this whole thing just to read session information for a user who has already logged on?

define('FORUM_ROOT', '/var/www/punbb/');
require FORUM_ROOT . 'include/common.php';
$forum_page['redirect_url'] = $post_info['real_link'];
$forum_page['form_action'] = forum_link($forum_url['login']);
$forum_page['hidden_fields'] = array(
        'form_sent'    => '<input type="hidden" name="form_sent" value="1" />',
        'redirect_url'    => '<input type="hidden" name="redirect_url" value="'.forum_htmlencode($forum_page['redirect_url']).'" />',
        'csrf_token'    => '<input type="hidden" name="csrf_token" value="'.generate_form_token($forum_page['form_action']).'" />'
    );

Thank you.


Wiki, Extensions

lundi 2 août 2010 par dummy@example.com (KeyDog)

I was thinking about adding my extensions to the Extension list on Wiki page, and well... I ended up reworking the page "a little bit"   lol So I wanted to ask, whether you think it's good to continue this way (= ordering extensions by maxtested forum version) or stick with the old chaotic way  smile

I think when these changes are completed, you can easily just come, see the extensions and tell apart active ones and old (maybe buggy) ones.

If you agree with me, I could use some help with that. Just check the maxtestedversion and try to obey rules (= alphabetic order, no link to author's profile at forum (guys, you don't need to boost your ego like that! Only thing that's coming from that is mess when you want to edit that table), link to extension topic, and description). Download link should be only at the topic so you don't have to search X pages for changing link when publishing new version of extension.

//Wasn't sure to which forum should I send this topic, so if it's wrong, please move it  neutral

Edit: Changes completed (now only thing that rest is adding extensions which weren't published at Wiki  hmm )


Signature, forbidden tags + error

dimanche 1er août 2010 par dummy@example.com (Grez)

In signature you get error msg on [ code ][ quote ][ list ] BB codes, but this error doesn't exist in lang files. There's only $lang_profile['Signature quote/code'] one.

parser.php, line 60

if (preg_match('#\[quote(=(&quot;|"|\'|)(.*)\\1)?\]|\[/quote\]|\[code\]|\[/code\]|\[list(=([1a\*]))?\]|\[/list\]#i', $text))
    $errors[] = $lang_profile['Signature quote/code/list'];

BTW why are these tags disallowed at all? I'm sure some people would like use these tags in signatures. neutral


Accueil du site | Contact | Plan du site | | Statistiques | visites : 22528 |

Suivre la vie du site fr    ?    |    Les sites syndiqués OPML   ?

Site réalisé avec SPIP 2.0.10 + AHUNTSIC

Creative Commons License