Recent changes to bugs

Cookie-Spoofing enables admin rights

2006-07-06T16:42:56Z

If administrator authentication is done by cookies, an
attacker can easily gain administrator access by
forging a cookie with name "adminmode" and value "1".

lines split up with more than one custom field if moderated

2006-06-03T10:43:15Z

If you have more than one custom field and using the
moderated mode, the lines get split up when approving
the post. If you look at the db file the entries are:
line 1: new post including custom field 1
line 2: delimiter, custom field 2
line 3: delimiter, custom field 3
etc.

This only happens while approving a post. As long as
the entry is not approved (or not using the moderated
mode) teh entries are correct.

If I find the time to look at it (i'm very busy
presently) I will send a fix.

rgds.
Andy

on v1.0.2 i get all post deleted when trying to edit a post

2006-05-10T22:15:29Z

i have
[Behaviour]
moderatedPosts = 1

in ini file
so, i get to approve the posts before they get published
but when i click edit a post the db erases itelf
automagically...

the db itself weighs around 25k right now
and contains 89 published posts so far..

worked well then it just stoppped
according to my tech buddy it might be since we changed
to php 5 on the server

as the code been revised to support php5 effectively ?
wopuld that be what is causing the problems ?

also we using cookies
(and is setup to do so in ini file)
as php sessions are disabled on the server..

pages with UTF-8 title can't be displayed in IE

2005-08-08T18:12:22Z

I wrote any Chinese characters in UTF-8 into gbName,
then the guestbook can't be displayed in Internet
Explorer. (but still works with Mozilla Firefox)
This is because IE wants to see charset="UTF-8" before
seeing any UTF-8 characters. It failed to display
anything in this situation.

Editing post deletes entire guestbook!

2005-06-01T23:38:45Z

I've been able to duplicate this problem on a Win2k
server running IIS & PHP 5.0.4. When logging in as an
administrator, editing a post, and then saving it, the
guestbook comes back with zero entries!! All the prior
entries are erased, and there is no backup file
generated by this program to recover from. VERY
FRUSTRATING! I don't know if this problem is unique to
my web server but obviously something is amiss. At a
minimum the program should save a backup guestbook file
just in case something like this happens.

UTF-8 Does Not Work

2005-04-14T20:56:58Z

When I add Turkish character included text, it doesn't
displayed properly.
Then I changed CharSet to iso-8859-9(Turkish) in
guestbook.ini file then it worked fine.

So there is a problem with UTF-8 encoding.

Can't edit russian posts

2005-03-12T20:49:50Z

I can't edit posts, made in russian language - in the
quotation all the russian symbols are changed into some
abracadabra. And when I post a comment - the original
message is distorted

Wrong CSS Declaration for 'totalnumber'?

2005-02-28T10:14:01Z

Line 402 in the guestbook.php begins with:
echo "\t\t<div id=\"totalnumber\">\n\t ...

This should be IMHO:
echo "\t\t<div class=\"totalnumber\">\n\t ...

Because of that the "div.totalnumber { }" Part is
missing in the guestbook.css.

I hope i understand your css file correctly and
everything i wrote make sense. ;)

Greetings Jens.

Exclamation mark in header stops use of css

2005-02-26T16:26:18Z

When I change the gbName property in the
guestbook.ini-file to something that that contains an
exclamation mark everything starts to look very weird.
For example, there is no longer any look to a
stylesheet (or rather the link is just an empty string).

Feel free to contact me with questions:
ulrik@theconcretes.com

missing parameter error

2004-03-01T00:51:03Z

On a FreeBSD server running Apache 1.3.27 and PHP 4.3.
2, the guestbook.php file returns this error for line 83:
"Warning: Missing argument 5 for displayinputform() in
/home/unitedba/public_html/UBFA_files/flatPHPbook/guest
book.php on line 83"

This message may be eliminated by changing the call to
displayInputForm() on line 1011 so that it refers to five
parameters rather than four:

corrected version:
displayInputForm("","","","","");

incorrect version:
displayInputForm("","","","");

Irritating! Why doesn't PHP warn about the line in which
the function is called and causes the error?