Nuke Resources - Downloads

Description: Changelog:
Fixed one vulnerability in admin_board.php - Xore
Added checking for proper session id characters to sessions and viewtopic to prevent injections - Bartlomiej Korupczynski
Fixed injection vulnerabilities possible with linked avatars
Implemented unsetting globalised variables
Limited confirm switch to POST variable in posting
Changed IP code in common.php to prevent IP spoofing
Updated visual confirmation mod [pre-edited files]
Moved obtaining word censors in modcp out of topic generation loop [increased performance/lower query count] - spotted by R45
Added the ability to link to https/ftps sites using the img bbcode tag
Fixed user online information in admin/index.php
Fixed getting group moderator in groupcp.php if running oracle backend - spotted by pakman
Fixed use of non-existing result variable in modcp (poster_id instead of user_id)
Fixed several vulnerabilities (XSS, SQL Injection and path disclosure) only possible with register_globals enabled - Matthew C. Kavanagh, Janek Vind
Fixed problem with SID not delivered to next page in groupcp.php

Delete the included upgrade file once it has been run, to run it upload it to the Forums folder and point your browser to:
http://www.yournukeurl.com/modules.php?name=Forums&file=update_to_209
Version: 2.0.9 Filesize: 133.93 Kb
Added on: 13-Jul-2004 Downloads: 5744 Rating: 10.0 (2 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.10 Popular

Description: Fixed deleting of styles in admin_styles.php
Fixed wrong unsetting of variables introduced in phpBB 2.0.9, making the board non-functional for users with specific php.ini settings
Added code to let phpBB work with PHP5 for those having register_long_arrays set to off (default settings) - running phpBB 2.0.x with PHP5 is not supported at http://www.phpbb.com.
Fixed bug in admin_board.php for board settings having single quotes in it
Fixed "search by author" in search.php. Now it is possible to search for users with special chars in their name too
Fixed forum jumpbox propagating session id in moderator control pages
Added check for newlines at redirecting pages, to prevent http response splitting attacks - Ory Segal and Amit Klein
Fixed visual confirmation code. The image was not created due to a wrong regular expression.
Version: 2.10 Filesize: 41.80 Kb
Added on: 18-Jul-2004 Downloads: 9880 Rating: 10.0 (3 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.0.14 NP2.9
Description: For Nuke Patched 2.9 or higher Only!!
The changelog (contained within this release) is as follows:

Hardened author and keyword search a bit to not allow very server intensive searches
Fixed full path disclosure in bad word parsing
Resetting complete userdata array in session code if authentication fails
Fixed bug in moderator control panel where certain parameters could lead to an "error creating new session" sql error
Fixed bug in session code where empty page ids could lead to an "error creating new session" sql error
Fixed html handling in signatures if html is turned off globally
Fixed install.php problem with PHP5 register_long_arrays option turned off
Fixed potential issues with styling system
Added correct class to login_body template file
Removed file db/oracle.php from package
Removed version number from message body page in /admin (if user is not an admin) - mikelbeck
Fixed case-sensitivity issues in postgres7.php - R45

Version: 2.0.14 Filesize: 73 bytes
Added on: 15-Apr-2005 Downloads: 2554 Rating: 10.0 (2 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.0.15 for core PHP-Nuke Popular

Description:

Fixed moderator status removal in groupcp.php
Removed newlines after ?> on some files - Thoul
Added admin re-authentication (admin needs to login seperatly to access the ACP) - backported from Olympus
Fixed vulnerability in url/bbcode handling functions - PapaDos and Paul/Zhen-Xjell from CastleCops
Fixed issue in admin/admin_forums.php
Suppressed warning message for fsockopen in /includes/smtp.php - Thoul
Fixed bug in admin/admin_smilies.php (admin is able to add empty smilies) - Exy
Adjusted documents to reflect the urgent need to update the files too (not only running the database update script)
Updated the readme file
Added one new language variable
Added general error if accessing profile for a non-existent user
Changed session id generation to be more unique - Henno Joosep
Fixed bug in highlight code to escape characters correctly
Reversed the 2.0.14 fix for postgresql because it produced more problems than it solves.
Added reference to article written by R45 about case-sensitivity in postgreSQL to the readme file
Fixed bypassing of validate_username on registration - Yen
Empty url/img bbcodes no longer get parsed

Version: 2.0.15 Filesize: 114.89 Kb
Added on: 08-May-2005 Downloads: 8695 Rating: 10.0 (1 Vote)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.0.18 NP Popular

Description: BBtoNuke 2.0.18 for Nuke Patched 2.9 and up

[Fix] incorrect handling of password resets if admin activation is enabled (Bug #88)
[Fix] retrieving category rows in index.php (Bug #90)
[Fix] improved index performance by determining the permissions before iterating through all forums (Bug #91)
[Fix] wrong topic redirection after login redirect (Bug #94)
[Fix] improved handling of username lists in admin_ug_auth.php (Bug #98)
[Fix] incorrect removal of bbcode_uid values if bbcode has been turned off (Bug #100)
[Fix] correctly preview signature if editing other users posts (Bug #101)
[Fix] incorrect alt tag on generated search images in groupcp.php, viewtopic.php and usercp_viewprofile.php (Bug #102)
[Fix] consistent forum ordering in all dropdown boxes (Bug #106)
[Fix] correctly get compression status in page_tail.php and page_footer_admin.php (Bug #117)
[Fix] set page title on summary page of groupcp.php (bug #125)
[Fix] correctly test style and avatar in usercp_register.php (bug #129 and #317)
[Fix] handling of reactivation notifications if admin activation is enabled (Bug #145)
[Fix] handling of both forms of translation information used in language packs (Bug #159)
[Fix] key length for activation keys fixed in usercp_sendpassword.php (Bug #171)
[Fix] use GENERAL_MESSAGE constant in message_die instead of MESSAGE (Bug #176)
[Fix] incorrect handling of move stubs (Bug #179)
[Fix] wrong mode_type in memberlist (Bug #187)
[Fix] SQL errors when setting maximum PMs to 0 (Bug #188)
[Fix] removed unused variable from topic_notify email template (Bug #210)
[Fix] removed unset variable from smilies popup window title (Bug #224)
[Fix] removed duplicate template assignment from admin_board.php (Bug #226)
[Fix] incorrect search link for guest posts in modcp.php (Bug #254)
[Fix] all users removed from topics watch table on special occassions (Bug #271)
[Fix] correctly check returned value from strpos in append_sid function (Bug #275)
[Fix] correctly display username in private message notification (Bug #278)
[Fix] fixed "var-by-ref" errors (Bug #322)
[Fix] changed redirection to installation (Bug #325)
[Fix] added timout of 10 seconds to version check (Bug #348)
[Fix] fixed user_level default in postgresql schema file (Bug #444)
[Fix] multiple minor HTML issues with subSilver
[Change] deprecated the use of some PHP 3 compatability functions in favour of the native equivalents
[Change] added 60 days limit for grabbing unread topics in index.php
[Sec] backport of session keys system from olympus
[Sec] fixed email bans to use the same pattern as email validation and allow wildcard domain bans
[Sec] fixed validation of topic type when posting
[Sec] unset database password once it is no longer needed
[Sec] fixed potential to select images outside the specified path as avatars or smilies
[Sec] fix globals de-registration code for PHP5 - (Stefan Esser/Matt Kavanagh)
[Sec] changed avatar gallery code sections to prevent possible injection points (AnthraX101)
[Sec] signature field is not properly sanitised for user input when an error occurs while accessing the avatar gallery (AnthraX101)
[Sec] check to_username and ownership when editing a PM (AnthraX101)
[Sec] fixed ability to edit PM's you did not send (depablo84)
[Sec] compare imagetype on avatar uploading to match the file extension from uploaded file

Version: 2.0.18 NP Filesize: 267.96 Kb
Added on: 01-Nov-2005 Downloads: 6319 Rating: 10.0 (2 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.0.21 For PHP-Nuke 8.0
Description: phpBB 2.0.21 port for PHP-Nuke 8.0
Version: 2.0.21 Filesize: 119.24 Kb
Added on: 09-Oct-2006 Downloads: 3358 Rating: 10.0 (1 Vote)
HomePage | Rate Resource | Details
Category: [12] PHP-Nuke 8.x/Addons

Nuke 6.9 Web Installer Popular

Description:

The latest version of NukeSQL.php, this one for PHP-Nuke 6.9, includes:

Installation of all database tables through a web browser based point & click script
Replace all tables option, allows you to start from scratch if your database tables become corrupted and no backup is available
New upgrade options:
PHP-Nuke 6.0 to 6.9 upgrade
Upgrade PHP-Nuke 6.0 and bbtonuke 2.0.6 to Nuke 6.9
PHP-Nuke 6.5 to 6.9 upgrade
PHP-Nuke 6.6 to 6.9 upgrade
PHP-Nuke 6.7 to 6.9 upgrade
PHP-Nuke 6.8 to 6.9 upgrade

Version: 6.9 Filesize: 73.48 Kb
Added on: 19-Aug-2003 Downloads: 11401 Rating: 9.0 (3 Votes)
HomePage | Rate Resource | Details
Category: [07] PHPNuke 6.x/Installers

BBtoNuke 2.0.19 Popular

Description: What has changed in this release?
The changelog (contained within this release) is as follows:

[Fix] corrected index on session keys table under MS SQL
[Fix] added session keys table to backup
[Fix] delete session keys entries when deleting user
[Fix] changes to support MySQL 5.0
[Fix] changes to some of the admin files to improve efficiency and remove a potential error condition when building the menu
[Fix] change truncation of username length in usercp_register.php - BFUK
[Fix] incorrect path to avatars in admin_users.php (Bug #667)
[Fix] fixed get_userdata to support correct sql escaping (non-mysql dbs) - jarnaez
[Fix] fixed captcha for those not having the zlib extension enabled
[Change] Placed version information above who is online in admin panel for better visual presence
[Sec] fixed XSS issue (only valid for Internet Explorer) within the url bbcode
[Sec] fixed XSS issue (only valid for Internet Explorer) if html tags are allowed and enabled
[Sec] added configurable maximum login attempts to prevent dictionary attacks
Version: 2.0.19 Filesize: 148.23 Kb
Added on: 30-Dec-2005 Downloads: 7554 Rating: 9.0 (4 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.0.21 Popular

Description: The changelog (contained within this release) is as follows:

[Fix] Changes to random number generator code to explicitly truncate the length of the string
[Fix] Quoting on boards with HTML enabled
[Fix] Special characters on boards with HTML enabled
[Fix] Redirect to list if cancelling deletion of ranks, smilies or word censors
[Fix] Missing error message if an inactive user tried to login (Bug #1598)
[Fix] Do not alter post counts when just removing a poll (Bug #1602)
[Fix] Correct error in removal of old session keys
[Fix] Changed filtering of short search terms
[Sec] Improved filtering on language selection (also addresses a number of bug reports related to missing languages)
[Change] Backported more efficient highlighting code from Olympus
[Change] Backported zlib emulation code so that there is only a single confirmation image even if zlib is not available
Version: 2.0.21 Filesize: 116.87 Kb
Added on: 08-Jun-2006 Downloads: 5552 Rating: 9.0 (4 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons

BBtoNuke 2.0.11 Popular

Description: Note: 02/18/05: Updated to include fixes from PHP-Nuke Patched 2.9. PHP-Nuke 7.x and BbtoNuke 2.0.10 are required

Changes since 2.0.10

Fixed unsetting global vars - Matt Kavanagh

Fixed XSS vulnerability in username handling - AnthraX101

Fixed not confirmed sql injection in username handling - warmth

Added check for empty topic id in topic_review function

Added visual confirmation mod to code base

Version: 2.0.11 Filesize: 120.47 Kb
Added on: 19-Nov-2004 Downloads: 12956 Rating: 8.0 (7 Votes)
HomePage | Rate Resource | Details
Category: [09] PHPNuke 7.x/Addons