The Joomla! Forum ™



Forum rules


Global Rules
Additional Rules for this forum <------- Please read before posting



Post new topic Reply to topic  [ 180 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6  Next
Author Message
PostPosted: Tue Jun 23, 2009 3:28 pm 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
Jerome123 wrote:
Hi everyone,

I would like to know if it is possible to write bbcode in the editor and get the translated bbcode into the var when i get the var via post??

e.g. from my component, user enter their data and use bbcode then press save button. on save the bbcode must be translated and recorded into a var which will get sent (mail) to whatever address you specify. but i only get blabla when i read and email the content of the user.

Does anybody know something that could direct me please.

Thanks for any help.

Regards

Jerome

You may use documented interface of yvBBCode to translate BBCode in the string, see here about onBBCode_RenderText event.

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Tue Jun 23, 2009 4:06 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
resp yvolk sir
I have finally customised YvBBcode as your advice, and put in my site here, almost all non english text are rendered with the help of your YvBBcode. Plz have a visit and yes also see the forum.
now my request is, is it possble to make it work in page title ?
I know u will surely find a way.
thanking you

_________________
4ঝুম্‌লা


Top
 Profile  
 
PostPosted: Wed Jun 24, 2009 7:45 am 
Joomla! Enthusiast
Joomla! Enthusiast

Joined: Tue Jan 27, 2009 1:35 pm
Posts: 119
Thanks a lot for your quick reply. I gave it a try and it works perfectly.

Thanks again for your help.

Regards,

Jerome


Top
 Profile  
 
PostPosted: Thu Jun 25, 2009 8:26 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
resp yvolk
I have new problem, ;D . I have installed "iddeIM" with YvBBcode , now bbcode is scrambled in composed msg menu , see this.
I have seach in iddeIM support section, advice is to disable YvBBcode. which is impossible for me.

waiting for your reply
thanks


Top
 Profile  
 
PostPosted: Fri Jun 26, 2009 3:28 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
4joomla wrote:
resp yvolk
I have new problem, ;D . I have installed "iddeIM" with YvBBcode , now bbcode is scrambled in composed msg menu , see this.
I have seach in iddeIM support section, advice is to disable YvBBcode. which is impossible for me.

waiting for your reply
thanks

Hi! In order to find out, were and if yvBBCode was possibly wrong, I need to have two _html_ files (not screenshots!), so I can compare them:
1) the page with yvBBCode turned off (disabled)
2) exactly the same page with yvBBCode enabled.

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Fri Jun 26, 2009 5:12 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
yvolk wrote:
4joomla wrote:
resp yvolk
I have new problem, ;D . I have installed "iddeIM" with YvBBcode , now bbcode is scrambled in composed msg menu , see this.
I have seach in iddeIM support section, advice is to disable YvBBcode. which is impossible for me.

waiting for your reply
thanks

Hi! In order to find out, were and if yvBBCode was possibly wrong, I need to have two _html_ files (not screenshots!), so I can compare them:
1) the page with yvBBCode turned off (disabled)
2) exactly the same page with yvBBCode enabled.

thanks for your reply.
where those heaml file generates ? to send you the html files ?
i have copied the html code with the help of firebug..
Code:
<div id="uddeim-bbemobox">
         <table cellspacing="4" cellpadding="0" border="0">
            <tbody><tr>
               <td><img title="BB code tags to produce bold text. Usage: <strong>bold</strong>" onclick="bbstyle(0); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode0" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_bold.gif" alt="bold"/></td>
               <td><img title="BB code tags to produce italic text. Usage: <em>italic</em>" onclick="bbstyle(2); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode2" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_italic.gif" alt="italic"/></td>
               <td><img text-decoration:underline;="" title="BB code tags to produce underlined text. Usage: <span style=" onclick="bbstyle(4); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode4" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_underline.gif" alt="underline"/>underline" /></td>
               <td> </td>
               <td><img color:#xxxxxx="" title="BB code tags to produce coloured letters. Usage <span style=" onclick="bbstyle(6); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode6" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_red.gif" alt="red"/>colored where XXXXXX is the hex code of the colour you want, for example FF0000 for red." /></td>
               <td><img color:#xxxxxx="" title="BB code tags to produce coloured letters. Usage <span style=" onclick="bbstyle(8); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode8" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_green.gif" alt="green"/>colored where XXXXXX is the hex code of the colour you want, for example 00FF00 for green." /></td>
               <td><img color:#xxxxxx="" title="BB code tags to produce coloured letters. Usage <span style=" onclick="bbstyle(10); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode10" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_blue.gif" alt="blue"/>colored where XXXXXX is the hex code of the colour you want, for example 0000FF for blue." /></td>
               <td> </td>
               <td><img title="BB code tags to produce very small letters. Usage: <span>very small text.</span>" onclick="bbstyle(12); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode12" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_size1.gif" alt="very small"/></td>
               <td><img title="BB code tags to produce small letters. Usage: <span> small text.</span>" onclick="bbstyle(14); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode14" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_size2.gif" alt="small"/></td>
               <td><img title="BB code tags to produce big letters. Usage: <span>big text.</span>" onclick="bbstyle(16); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode16" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_size4.gif" alt="large"/></td>
               <td><img title="BB code tags to produce very big letters. Usage: <span>very big text.</span>" onclick="bbstyle(18); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" name="addbbcode18" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_size5.gif" alt="very large"/></td>
                     <td> </td>
               <td><img title="Close all open BB code tags." onclick="bbstyle(-1); textCount(document.sendeform.pmessage,document.sendeform.characterstyped,2500); return false;" style="cursor: pointer;" src="http://www.asamsahityasabha.com/components/com_uddeim/templates/monorange/images/format_closeall.gif" alt="close tags"/></td>
            </tr>
         </tbody></table>
      </div>

BTW i have check with yvBBCode turned off .... BBcodes shows normally, now It there any way to stop loading yvBBcode between <div id="uddeim-bbemobox"> <div> tag in that page ? I think this will solve my problem
thanks


Top
 Profile  
 
PostPosted: Fri Jun 26, 2009 6:18 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
4joomla wrote:
yvolk wrote:
4joomla wrote:
resp yvolk
I have new problem, ;D . I have installed "iddeIM" with YvBBcode , now bbcode is scrambled in composed msg menu , see this.
I have seach in iddeIM support section, advice is to disable YvBBcode. which is impossible for me.

waiting for your reply
thanks

Hi! In order to find out, were and if yvBBCode was possibly wrong, I need to have two _html_ files (not screenshots!), so I can compare them:
1) the page with yvBBCode turned off (disabled)
2) exactly the same page with yvBBCode enabled.

thanks for your reply.
where those heaml file generates ? to send you the html files ?

Please, attach TWO COMPLETE HTML FILES, describe above.
In Firefox press right mouse button and select "View page source" in the context menu. "Source of http://... window will open.
In the window menu File->Save Page as ...HTML document.


Top
 Profile  
 
PostPosted: Fri Jun 26, 2009 9:29 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
thanks for reply
please check your inbox

regards
4joomla


Top
 Profile  
 
PostPosted: Sat Jun 27, 2009 5:49 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
At last I understood what the problem is: you've put description of BBCode's usage directly into the page (into the title attribute of the HTML element), like this:
---
<img title="BB code tags to produce bold text. Usage: [b]bold[/b]"
---
so yvBBCode naturally translates this into HTML markup and brakes your HTML page.

To avoid this translation you should _escape_ "[" and "]" brackets with
special escape sequences: "&#91;" and "&#91;", respectively, like this:
---
title="BB code tags to produce bold text. Usage: &#91;b&#93;bold&#91;/b&#93;"
---
User sees the same bracket, but yvBBCode doesn't change the text.

PS: As you may see I've disabled BBCodes in this forum message so you may see the code unchanged by the forum's BBCode parser :-)

-------------------------------------
"4joomla" wrote:

resp yvolk
I have new problem, ;D . I have installed "iddeIM" with YvBBcode , now bbcode is scrambled in composed msg menu , see [url=http://i42.tinypic.com/qqobol.png]this[/url].
I have seach in iddeIM support section, advice is to disable YvBBcode. which is impossible for me.

waiting for your reply
thanks


-------------------------------------
"yvolk" wrote:

Hi! In order to find out, were and if yvBBCode was possibly wrong, I need to have two _html_ files (not screenshots!), so I can compare them:
1) the page with yvBBCode turned off (disabled)
2) exactly the same page with yvBBCode enabled.[/quote]

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Sat Jun 27, 2009 7:17 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
In nutshell I understood that U have ask me to replace "[" and "]" with "&#91;" this one.
Quote:
title="BB code tags to produce bold text. Usage: &#91;b&#93;bold&#91;/b&#93;"

here u have used "&#93;" why ?
And how and here to put it ? basic.php file ? like previous ....
My question might sound idiotic to u, sorry for that .
thanks


Top
 Profile  
 
PostPosted: Sun Jun 28, 2009 3:23 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
4joomla wrote:
In nutshell I understood that U have ask me to replace "[" and "]" with "&#91;" this one.
Quote:
title="BB code tags to produce bold text. Usage: &#91;b&#93;bold&#91;/b&#93;"

here u have used "&#93;" why ?

"[" should be replaced with "&#91;" and "]" - with "&#93;" .

4joomla wrote:
And how and here to put it ? basic.php file ? like previous ....
My question might sound idiotic to u, sorry for that .
thanks

You mean _where_ to put it?
The text that I cited ("BB code tags to produce bold text. Usage...") is NOT a part of yvBBCode. -This is why I didn't do this myself: everything is Ok in yvBBCode.

I think that the text to fix is from 'uddeim-bbemobox' so you should forward my advice to its developers.

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Sun Jun 28, 2009 6:53 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
Quote:
("BB code tags to produce bold text. Usage...")
this part was in english.php file in the component folder. replace "[" and "]" with the code u adviced now it is working 100% .
Many many thanks for your guide
see this
:)


Top
 Profile  
 
PostPosted: Mon Jun 29, 2009 2:50 pm 
Joomla! Intern
Joomla! Intern

Joined: Thu Sep 27, 2007 1:42 pm
Posts: 64
Hey, I wanted to add <sup>NEW!</sup> after some products on a menu on my site and was nearly giving up until I found this great little plugin. Well done. It's worth installing just to be able to add HTML to menu titles alone.

Image


Top
 Profile  
 
PostPosted: Tue Jun 30, 2009 8:55 pm 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
Resp yvolk
Is there any way to hide YvBBcode plugin from another plugin ?
thanking you
( your plugin is now my most fav plugin)
:laugh: :)


Top
 Profile  
 
PostPosted: Wed Jul 01, 2009 2:11 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
4joomla wrote:
Resp yvolk
Is there any way to hide YvBBcode plugin from another plugin ?

What do you mean? Please give a detailed example...


Top
 Profile  
 
PostPosted: Wed Jul 01, 2009 3:55 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
yvolk wrote:
4joomla wrote:
Resp yvolk
Is there any way to hide YvBBcode plugin from another plugin ?

What do you mean? Please give a detailed example...

Sorry,
say for example I want to hide myminiprofile ( a C Builder plugin) from YvBBcode , is there any way to do it ?


Top
 Profile  
 
PostPosted: Wed Jul 01, 2009 5:43 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
4joomla wrote:
yvolk wrote:
4joomla wrote:
Resp yvolk
Is there any way to hide YvBBcode plugin from another plugin ?

What do you mean? Please give a detailed example...

Sorry,
say for example I want to hide myminiprofile ( a C Builder plugin) from YvBBcode , is there any way to do it ?

Do you mean that you don't want yvBBCode to translate BBCodes in some part of the HTML page (e.g. inside some <div class='myminiprofile' ... > )?
If yes, yvBBCode doesn't have such an option: you will have to hack it...

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Thu Jul 02, 2009 9:10 am 
Joomla! Intern
Joomla! Intern

Joined: Fri Sep 08, 2006 7:35 am
Posts: 74
yvolk wrote:
At last I understood what the problem is: you've put description of BBCode's usage directly into the page (into the title attribute of the HTML element), like this:
---
<img title="BB code tags to produce bold text. Usage: bold"
---
so yvBBCode naturally translates this into HTML markup and brakes your HTML page.

To avoid this translation you should _escape_ "[" and "]" brackets with
special escape sequences: "&#91;" and "&#91;", respectively, like this:
---


A plugin should never modify text in html properties like title or alt which might cause side effects like this. Please parse html code exactly so only content is modified.

I will add the workaround in the FAQ so people who really wants to use these (broken) plugins can patch their language files but I will not provide patched files.

I do not recommend the usage of these plugins since an admin has no control which other components or modules might break because of that.


Top
 Profile  
 
PostPosted: Thu Jul 02, 2009 9:50 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
slabbi wrote:
yvolk wrote:
At last I understood what the problem is: you've put description of BBCode's usage directly into the page (into the title attribute of the HTML element), like this:
---
<img title="BB code tags to produce bold text. Usage: bold"
---
so yvBBCode naturally translates this into HTML markup and brakes your HTML page.

To avoid this translation you should _escape_ "[" and "]" brackets with
special escape sequences: "&#91;" and "&#91;", respectively, like this:
---


A plugin should never modify text in html properties like title or alt which might cause side effects like this. Please parse html code exactly so only content is modified.

I will add the workaround in the FAQ so people who really wants to use these (broken) plugins can patch their language files but I will not provide patched files.

I do not recommend the usage of these plugins since an admin has no control which other components or modules might break because of that.

Hi slabbi,
I agree: plugins that change content, SHOULD parse html code. The problem is that Joomla!, as far as I know, doesn't have any 'HTML parser' library that may be easily reused for such tasks (HTML_BBCodeParser library" which my plugin is based on does not have also).
So yvBBCode plugin in NOT broken: it is just not very intelligent ;)

BTW, do you have any suggestions about "The HTML Parser for Joomla!" to be???

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Thu Jul 02, 2009 10:04 am 
Joomla! Intern
Joomla! Intern

Joined: Fri Sep 08, 2006 7:35 am
Posts: 74
Maybe you could create a regexp that checks if it does not replace text inside an alt or title property or maybe inside "< >". Maybe it should not replace text when an open "<" and closed ">" is found before/after your replacement.


Top
 Profile  
 
PostPosted: Thu Jul 02, 2009 10:58 am 
Joomla! Fledgling
Joomla! Fledgling

Joined: Fri Mar 27, 2009 11:49 am
Posts: 2
Hi,
a great plugin.
But i'm missing a code highlighting for php-code.
I would like to add a [php] section to my articles and the string between the tags should be replaced by php's function
Code:
highlight_string(string);

Where and how do I have to define this piece of code?


Top
 Profile  
 
PostPosted: Thu Jul 02, 2009 11:21 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Tue Jun 02, 2009 2:44 pm
Posts: 46
4joomla wrote:
yvolk wrote:
4joomla wrote:
Resp yvolk
Is there any way to hide YvBBcode plugin from another plugin ?

What do you mean? Please give a detailed example...

Sorry,
say for example I want to hide myminiprofile ( a C Builder plugin) from YvBBcode , is there any way to do it ?


Sorry for late reply
Probably problem was similar with iddeIM (as I had before). when YvBBcode on and when YvBBcoes is off .
thanking you


Top
 Profile  
 
PostPosted: Tue Aug 18, 2009 8:58 pm 
Joomla! Fledgling
Joomla! Fledgling

Joined: Tue Aug 18, 2009 8:51 pm
Posts: 1
I'm trying to add a custom BBCode as follows:
Code:
[Item]{NUMBER}[/Item]

And I want to to be replaced with:
Code:
<a class="aiondb-item-full-small" href="http://www.aionarmory.com/item.aspx?id={NUMBER}">Item #{NUMBER}</a>

I added this to the Extended.php file, but it doesn't work. My problem is that I can't figure out how to access the stuff you write in between the two BBCode tags
Code:
'item' => array( 'htmlopen'  => 'a class=\'aiondb-item-full-small\' target=\'_blank\' href=\'http://www.aionarmory.com/index.aspx=id=%1$s%2$s\'',
                                                'htmlclose' => 'a',
                                                'allowed'   => 'all',
                                                'attributes'=> array()),

The HTML shows up as:
Code:
<a class='aiondb-item-full-small' target='_blank' href='http://www.aionarmory.com/index.aspx=id=%1$s%2$s'>100900189</a>

I can live with the link name only being the number itself if that's something that's difficult to implement, but I really would like it to put the number in the URL.


Top
 Profile  
 
PostPosted: Tue Sep 15, 2009 3:09 pm 
Joomla! Enthusiast
Joomla! Enthusiast

Joined: Tue Jan 27, 2009 1:35 pm
Posts: 119
Hi everyone,

I have altered some of the bbcode to add my own style, but i would like to know if there is a way to add a parameter (attribute) which will be added to for example the class that has been set.

e.g. [test option=something]this is a test[/test]

by using [test][/test] it will automatically add <a class="set"></a>. Now when specifying an option i want the bbcode to add the option value to the class so if the option is "me" then the class name would be class="set me".

Hope it makes sense.

Thanks for any help

Regards,

Jerome


Top
 Profile  
 
PostPosted: Tue Sep 22, 2009 3:54 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
Hi Jerome,
The yvBBCode plugin is based on HTML_BBCodeParser (part of PEAR Package) - parser library
So answers to such questions may be found here: http://pear.php.net/package/HTML_BBCodeParser
Jerome123 wrote:
Hi everyone,

I have altered some of the bbcode to add my own style, but i would like to know if there is a way to add a parameter (attribute) which will be added to for example the class that has been set...

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Thu Oct 01, 2009 2:39 pm 
Joomla! Fledgling
Joomla! Fledgling

Joined: Thu Oct 01, 2009 2:36 pm
Posts: 2
Dear developer pls help me, i don't have any problem in uses, but last night there is an atempt of sql injection on my site using this plugin, here are the details, pls upgrade or do some thing to make it secure:
"(?:\\b(?:(?:n(?:et(?:\\b\\W+?\\blocalgroup|\\.exe)|(?:map|c)\\.exe)|t(?:racer(?:oute|t)|elnet\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\.exe|echo\\b\\W*?\\by+)\\b|c(?:md(?:(?:32)?\\.exe\\b|\\b\\W*?\\/c)|d(?:\\b\\W*?[\\\\/]|\\W*?\\.\\.)|hmod.{0,40}?\\+.{0,3}x))|[\\;\\|\\`]\\W*?
..." at REQUEST_HEADERS:User-Agent. [file
"/usr/local/apache/conf/modsec2.user.conf"] [line "146"] [id "959006"]
[msg "System Command Injection"] [data "; id"] [severity "CRITICAL"] [tag
"WEB_ATTACK/COMMAND_INJECTION"] [hostname "latestdown.com"] [uri
"/plugins/system/yvbbcode/default.css"] [unique_id
"SsSc366OS6oAAGs0e0gAAAAB"]
> [Thu Oct 01 17:43:19 2009] [error] [client 125.161.54.173] ModSecurity:
Access denied with code 501 (phase 2). Pattern match


Top
 Profile  
 
PostPosted: Fri Oct 02, 2009 6:06 am 
User avatar
Joomla! Guru
Joomla! Guru

Joined: Thu Jun 01, 2006 1:52 pm
Posts: 975
Location: Moscow, Russia
Hi shiva111,
as I understand your report, someone made the request to the "/plugins/system/yvbbcode/default.css" file on your server with parameters that where detected (by some 'ModSecurity' process...) to be an attack.
And that's all :)

This may mean that someone wants to hack your site,
but this doesn't mean that there is any vulnerability (hole) in your site (in yvBBCode extension or anywhere else...)

shiva111 wrote:
Dear developer pls help me, i don't have any problem in uses, but last night there is an atempt of sql injection on my site using this plugin, here are the details, pls upgrade or do some thing to make it secure:
"(?:\\b(?:(?:n(?:et(?:\\b\\W+?\\blocalgroup|\\.exe)|(?:map|c)\\.exe)|t(?:racer(?:oute|t)|elnet\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\.exe|echo\\b\\W*?\\by+)\\b|c(?:md(?:(?:32)?\\.exe\\b|\\b\\W*?\\/c)|d(?:\\b\\W*?[\\\\/]|\\W*?\\.\\.)|hmod.{0,40}?\\+.{0,3}x))|[\\;\\|\\`]\\W*?
..." at REQUEST_HEADERS:User-Agent. [file
"/usr/local/apache/conf/modsec2.user.conf"] [line "146"] [id "959006"]
[msg "System Command Injection"] [data "; id"] [severity "CRITICAL"] [tag
"WEB_ATTACK/COMMAND_INJECTION"] [hostname "latestdown.com"] [uri
"/plugins/system/yvbbcode/default.css"] [unique_id
"SsSc366OS6oAAGs0e0gAAAAB"]
> [Thu Oct 01 17:43:19 2009] [error] [client 125.161.54.173] ModSecurity:
Access denied with code 501 (phase 2). Pattern match

_________________
Text of all my messages is available under the terms of the GNU Free Documentation License: http://www.gnu.org/copyleft/fdl.html


Top
 Profile  
 
PostPosted: Fri Oct 02, 2009 7:17 am 
Joomla! Fledgling
Joomla! Fledgling

Joined: Thu Oct 01, 2009 2:36 pm
Posts: 2
so are you sure its safe to use? One more thing i had to report, after enabling this plugin Jom comment stops working, as it does not shows any error but when trying to add any comment it does not do so. but when i disable yvbbcode it starts working again. May be you can help me to fix this. Otherwise you made a brilliant thing to use bbcodes on joomla. thanks a lot for making such wonderful plugin.

yvolk wrote:
Hi shiva111,
as I understand your report, someone made the request to the "/plugins/system/yvbbcode/default.css" file on your server with parameters that where detected (by some 'ModSecurity' process...) to be an attack.
And that's all :)

This may mean that someone wants to hack your site,
but this doesn't mean that there is any vulnerability (hole) in your site (in yvBBCode extension or anywhere else...)

shiva111 wrote:
Dear developer pls help me, i don't have any problem in uses, but last night there is an atempt of sql injection on my site using this plugin, here are the details, pls upgrade or do some thing to make it secure:
"(?:\\b(?:(?:n(?:et(?:\\b\\W+?\\blocalgroup|\\.exe)|(?:map|c)\\.exe)|t(?:racer(?:oute|t)|elnet\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\.exe|echo\\b\\W*?\\by+)\\b|c(?:md(?:(?:32)?\\.exe\\b|\\b\\W*?\\/c)|d(?:\\b\\W*?[\\\\/]|\\W*?\\.\\.)|hmod.{0,40}?\\+.{0,3}x))|[\\;\\|\\`]\\W*?
..." at REQUEST_HEADERS:User-Agent. [file
"/usr/local/apache/conf/modsec2.user.conf"] [line "146"] [id "959006"]
[msg "System Command Injection"] [data "; id"] [severity "CRITICAL"] [tag
"WEB_ATTACK/COMMAND_INJECTION"] [hostname "latestdown.com"] [uri
"/plugins/system/yvbbcode/default.css"] [unique_id
"SsSc366OS6oAAGs0e0gAAAAB"]
> [Thu Oct 01 17:43:19 2009] [error] [client 125.161.54.173] ModSecurity:
Access denied with code 501 (phase 2). Pattern match


Top
 Profile  
 
PostPosted: Mon Oct 19, 2009 8:28 pm 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Wed Jun 11, 2008 1:59 am
Posts: 66
OK, I'm an idiot. I'm trying to add 16x16 images to menu items similar to what Ace_ above did with the word "New". The tags' effects show correctly in the menu items listings in admin, but the front end shows the bb code instead of the effect.

_________________
http://www.Business-Website-Designs.com
http://www.WebsitesCR.com


Top
 Profile  
 
PostPosted: Thu Oct 29, 2009 10:18 am 
Joomla! Fledgling
Joomla! Fledgling

Joined: Thu Oct 29, 2009 9:43 am
Posts: 3
Hello,
i found today this amazing plugin and I wonder how could have I lived without it till today !! :-)

I' have a problem in a website I'm developing, and I hope that someone could help me:
- joomla 1.5.14
- os linux
- url http://naplesmade.sitotemporaneo.it

Look at the vertical menu on the left side: "camicie da uomo su misura" goes correctly on two lines. However, if you click on the link itself, the target page will show "camicie da uomo [br] su misura"... what's going on ? the menu is the same, obviously... the fancy thing is that if you click on a tissue's photo on this page, the next page will have the left menu correctly breaked !

I attach a zip file containing 4 files: the html sources of the two pages I described above, each with the plugin active or not-active.

Many thanks to everyone who will suggest me a solution !

Best Regards,
Giorgio


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 180 posts ]  Go to page Previous  1, 2, 3, 4, 5, 6  Next



Who is online

Users browsing this forum: No registered users and 12 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group