MyBB Community Forums - Duplicate or Bogus Bugs

[B] Birthday bug

Thu, 20 Aug 2009 01:48:49 +0000

If it's been reported mark as bogus. Done a search and looked over current titles in bugs and didn't see anything that matched. This member registered in 06. This may have something to do with it as coding may of changed since then. If I remember correctly, users used to be able to register without using the birthdate option. But what's funnier is the second screen I post where he entered his birthdate with no year either. We could of had a change in whether or not the user must put a birthdate in and using partial birthdates. I can't tell you which version I used when I started this forum, but I'm sure it's as old as dirt beings it was in 2006

No birthdate showing and is not listed as hidden when it shows. Incomplete birthdate profile field.

Regards

birth.png (Size: 5.08 KB / Downloads: 352)

burthday.png (Size: 5.07 KB / Downloads: 308)

[B] Not sure if its a bug really

Wed, 19 Aug 2009 02:14:32 +0000

If you look at the who is online, and someone who happens to have a letter at the end, the letter will drop the the screen below, if there is no more room. I just saw this happen with justin S

[B] Ignore/Buddy List and special characters

Tue, 18 Aug 2009 04:51:51 +0000

Λ√-

That's a username I can't add to a buddy/ignore list.

[B] Saving template WIPES HALF

Sun, 16 Aug 2009 10:33:04 +0000

I've been attempting to save a template but every time I do, it wipes half of the HTML. I have no idea why it has just started doing it. I can't view the php page since the page doesn't close the body and html tags.

??????

Now it is saving properly...

I had about 113 lines of HTML for the template and it cut back to around 53.

[D] Can duplicate ADMIN

Sun, 16 Aug 2009 07:02:05 +0000

I have a user account for ADMIN (user #1) but someone has managed to setup another account with the same name (user #15636).

I'm assuming this is some weird bug that allows this to happen.

Worse news: I asked someone to send a PM to admin and it was sent to the new admin, not the real admin.

UPDATE: I changed the name of the new admin to something else and then tried to register admin again, but now it tells me that admin is already registered by another member. So how did the admin I've just changed manage to register?

[B] Remove BBCode/MyCode in Emails

Thu, 13 Aug 2009 17:01:45 +0000

Hi, I just noticed this in one of my subscribed emails. The post section of the email was this:

Here is an excerpt of the message:
------------------------------------------

luigi987 Wrote: (Today 05:17 PM)
--
[size=large][align=center][color=#FF0000]I have concluded that ... (visit the thread to read more..)
------------------------------------------

To view the thread, you can go to the following URL:
http://community.mybboard.net/thread-54748-newpost.html

Since BBCode (or MyCode or whatever) doesn't parse in emails, I think the best thing is to remove them from the inputs.

Now, I don't know if this is a bug or is simply an un-implemented feature. Either way, if it's a bug, fix it, if it's something that hasn't been considered before, it should be an included feature.

[D] Move unapproved threads then approve -- no effect

Wed, 12 Aug 2009 22:05:37 +0000

Steps to recreate

Forum 1 -- has posts and threads requiring approval before showing
make a thread
move thread to another forum (may or may not requiring approval)
approve thread
thread still showing post not approved (even if you go into the thread and approve the post)

meep meep my first bug report

[B] File permission alert

Wed, 12 Aug 2009 20:33:41 +0000

Hi to all,

When "inc/config.php" and "inc/settings.php" have not writable permission, then you can see that MyBB* ask you to CHMOD them to 777. but i think it must be 666.

* AdminCP » Tools & Maintenance

[D] [1.4.8] Find All Posts does not work

Wed, 12 Aug 2009 05:10:02 +0000

Steps:
Do a "Find All Posts" search (Code call is "search.php?action=finduser&uid=") in any users' profile.

Result:
Search does not work: "Sorry, but no results were returned using the query information you provided. Please redefine your search terms and try again."

Version Tested: 1.4.8 - was working correctly in 1.4.6
PHP: 5.2.6
MySQL: 5.0.41

Will provide URL only on PM request for privacy concerns.

[B] my_setcookie() is too Weak..,

Mon, 10 Aug 2009 08:26:25 +0000

Sorry, if this is sounds like a suggestion thingie,
i'm still tendence post it here coz it is more like a bug for me, and i hope developer team can fix this on next version.

---------------
Dear MyBB Group,

I want to report some kind of bugs, uhm no, it's not really a bugs i think,
Im using your latest version, 1.4.8,. and it's workin good.
ok, let say this is just a low level in critical security.
It's all about Mybb's cookie,. the way it created with my_setcookie for keyname mybbuser,
i think it's very easy for user to exchange their cookie just to make authorization and get login.

mmphh, sorry my bad english . --__--''

ok,. here's the thing i founded when i'm encountering the problem,.
my friend (on the same board with me) gimme his mybbuser cookie,. and i'm tryin to use that by injecting cookie to Opera or Firefox with Cookie Editor or wotsoever,. and bang,. im in, with my friend's ID.

U might not see this as a big problem, dont you?, but errr, a couple day ago, one of staff moderator in my forum, got hacked,.
someone else use his ID, and posting a weird thing. Leak VIP stuff, steall it, and moreover,. And my friend denied that he do that.
i dont know which is trigger this problemo,.
maybe this is human error with my staff,
or maybe this human error (again) that my staff got keylogger or trojan,

no matter wot/how it is, i think i'd just offer you some good solution for these,.
the way to create mybbuser cookie with mysetcookie,
is not secure enough if we just joining userID."_".loginkeyHash
maybe there's another better solution but this is one of my way patching the board just to prevent user exchange their cookie, or stolen by accident with keyloger or some kind like that.
Thx God, (well, i hope) there's no XSS left on this version, .. :o

some function that i need, placed in function.php
:
/*-------------------*/
--Declined--

Thanks,. for ya attention,.
keep rockin' ,. \m/

Salam,.
::Idx.

[B] /me errors

Mon, 10 Aug 2009 03:26:37 +0000

try to quote /me I meant to post this a long time ago, i did a test but i forgot sorry if its been fixed

Quote:/me loves life

Quote:T0m loves life

[D] Magic Quotes Deprecated in PHP 5.3+

Thu, 06 Aug 2009 18:05:16 +0000

As some members that are running PHP 5.3+ have found, since Magic Quotes is deprecated, error messages show up since the functions are called in inc/class_core.php.

Find in inc/class_core.php:

// Determine Magic Quotes Status
if(get_magic_quotes_gpc())
{
	$this->magicquotes = 1;
	$this->strip_slashes_array($_POST);
	$this->strip_slashes_array($_GET);
	$this->strip_slashes_array($_COOKIE);
}
set_magic_quotes_runtime(0);
@ini_set("magic_quotes_gpc", 0);
@ini_set("magic_quotes_runtime", 0);

Replace with:

if(phpversion() < "5.3")
{
	// Determine Magic Quotes Status
	if(get_magic_quotes_gpc())
	{
		$this->magicquotes = 1;
		$this->strip_slashes_array($_POST);
		$this->strip_slashes_array($_GET);
		$this->strip_slashes_array($_COOKIE);
	}
	set_magic_quotes_runtime(0);
	@ini_set("magic_quotes_gpc", 0);
	@ini_set("magic_quotes_runtime", 0);
}

[B] Doc attachment detected as gif

Tue, 04 Aug 2009 12:04:40 +0000

While downloading a doc file I noticed it was detected as a gif file.

[B] Custom Group Deletion

Sun, 02 Aug 2009 04:14:33 +0000

When you delete a custom group where a member might be additional it's not removed from their additionalgroups column.

[B] stats bug?

Sat, 01 Aug 2009 05:02:05 +0000

Screens below.

If not a bug sorry.

erx1.png (Size: 226.21 KB / Downloads: 323)

erx2.png (Size: 196.85 KB / Downloads: 306)