Topics

1

Bugs / MOVED: Change User Title

« on: February 15, 2008, 07:25:06 am »

This topic has been moved to Suggestions.

http://www.daniel15.com/forum/index.php?topic=1426.0

2

General SMFShop Discussion / MOVED: shop mod theme help?

« on: February 15, 2008, 06:58:01 am »

This topic has been moved to Completed Requests.

http://www.daniel15.com/forum/index.php?topic=1482.0

3

Shop Button Requests / MOVED: Shop button for ApolloBB

« on: January 05, 2008, 01:17:39 pm »

This topic has been moved to Completed Requests.

http://www.daniel15.com/forum/index.php?topic=1412.0

4

Installation Problems / MOVED: Messed Up My Forum

« on: January 05, 2008, 01:13:22 pm »

This topic has been moved to FlashChat Integration.

http://www.daniel15.com/forum/index.php?topic=1416.0

5

General SMFShop Discussion / MOVED: FlashChat Integration, FREE or NOT?

« on: November 26, 2007, 10:24:21 am »

This topic has been moved to FlashChat Integration.

http://www.daniel15.com/forum/index.php?topic=1186.0

6

General SMFShop Discussion / MOVED: Buying an item more than once at a time.

« on: November 26, 2007, 10:22:19 am »

This topic has been moved to Requested additions.

http://www.daniel15.com/forum/index.php?topic=1308.0

7

SMFShop Announcements / SECURITY UPDATE for recent exploits (redirect when you access your forum)

« on: November 25, 2007, 12:33:18 pm »

Recently, I was informed of an XSS problem in SMFShop. If you have been affected by this problem, your forum will redirect to another site when you visit it.This was caused by several items not correctly sanitising user-supplied input. To fix this problem, please replace the following files in your SMFShop installation's Sources/shop/items directory ASAP:
ChangeDisplayName.php
ChangeUserTitle.php
ChangeUsername.php
ChangeOtherTitle.php
(right-click each link, choose "Save Target As" or "Save Link As", save the files to your computer, and then upload them via FTP to your site
If you are unable to do this immediately, please remove any said items from your shop to prevent your site from being exploited.

If you were exploited, please run the following queries in phpMyAdmin. This will set all user's display names back to their username:
SMF 1.1:

Code: [Select]

UPDATE smf_members SET realName = memberName
SMF 2.0:

Code: [Select]

UPDATE smf_members SET real_name = member_name
Alternatively you may try these queries, which should only change the names of users who abused the exploit:
SMF 1.1:

Code: [Select]

UPDATE smf_members SET realName = memberName WHERE real_name LIKE "%<SCRIPT%"
SMF 2.0:

Code: [Select]

UPDATE smf_members SET real_name = member_name WHERE real_name LIKE "%<SCRIPT%"
Sorry about this guys! When I get some free time, I (as well as others) will be going over SMFShop's code, looking for any similar problems. Because this is a project I do in my free time, I don't get much time to dedicate to it.

Thanks,
 - Daniel15

8

Bugs / MOVED: Server errors with Subs.php in SMF 1.1.3

« on: July 27, 2007, 08:59:54 pm »

This topic has been moved to FlashChat Integration.

http://www.daniel15.com/forum/index.php?topic=1047.0

9

Installation Problems / MOVED: Flashchat Integration installation problems

« on: June 30, 2007, 04:39:38 pm »

This topic has been moved to FlashChat Integration.

http://www.daniel15.com/forum/index.php?topic=988.0

10

Requested additions / MOVED: Free Money Idea

« on: June 23, 2007, 11:59:56 am »

This topic has been moved to Items.

http://www.daniel15.com/forum/index.php?topic=969.0

11

General SMFShop Discussion / Sourceforge-like system for SMFShop-related stuff... Good idea?

« on: March 02, 2007, 05:13:48 pm »

Would anyone be interested in a Sourceforge-like system for SMFShop related stuff (additional items, etc.)? Basically, anyone (especially people like Basil Beard, and other item creators here ) could create a new "project", and host all their project's data on my site. Each project gets (among other things) its own home page, forums, news system, file release system (download manager), and Subversion access. This would be similar to what CMS Made Simple does: http://dev.cmsmadesimple.org/

This would make it a lot easier to manage large items. We could have a downloads page, forums, and a website dedicated to the SMF Pets item, for example. Anyone interested?

12

General SMFShop Discussion / MOVED: Character Bonus Recalculation

« on: February 24, 2007, 09:13:14 am »

This topic has been moved to Bugs.

http://www.daniel15.com/forum/index.php?topic=553.0

13

Completed Shop Buttons / Pirates

« on: February 17, 2007, 09:56:06 am »

This is a button for the "Pirates" theme

Code modifications:
Open Themes/pirates_final/index.template.php
Find:
         // the [My Calendar] button

if ($context['allow_calendar'])

echo'<a href="', $scripturl, '?action=calendar"><font color="#FFFFFF">' , $txt['calendar24'] , '</font></a> :: ';
Add after:
         // SMFShop

echo'<a href="', $scripturl, '?action=shop"><font color="#FFFFFF">Shop</font></a> :: ';
Then, your shop button should be working

14

Completed Shop Buttons / blackTed

« on: February 17, 2007, 09:21:51 am »

This is a button for the BlackTed theme .

Code modifications:
Open Themes/blackted/index.template.php
Find:

if ($context['current_action'] == 'theme')

$current_action = isset($_REQUEST['sa']) && $_REQUEST['sa'] == 'pick' ? 'profile' : 'admin';
Add after:

if ($context['current_action'] == 'shop')

$current_action = 'shop';
Also, find:

// The [calendar]!

if ($context['allow_calendar'])

echo ($current_action == 'calendar' || $context['browser']['is_ie4']) ? '<td class="maintab_active_' . $first . '">&nbsp;</td>' : '' , '

<td class="maintab_' , $current_action == 'calendar' ? 'active_back' : 'back' , '">

<a href="', $scripturl, '?action=calendar">' , $txt['calendar24'] , '</a>

</td>' , $current_action == 'calendar' ? '<td class="maintab_active_' . $last . '">&nbsp;</td>' : '';
Add after:

// SMFShop

echo ($current_action == 'shop' || $context['browser']['is_ie4']) ? '<td class="maintab_active_' . $first . '">&nbsp;</td>' : '' , '

<td class="maintab_' , $current_action == 'shop' ? 'active_back' : 'back' , '">

<a href="', $scripturl, '?action=shop">Shop</a>

</td>' , $current_action == 'shop' ? '<td class="maintab_active_' . $last . '">&nbsp;</td>' : '';
Then, your shop button should be working

15

Completed Shop Buttons / Default_Modern

« on: February 11, 2007, 10:42:00 am »

This is a shop button for the Default_Modern theme by m3talc0re. Like most m3talc0re themes, this theme is quite nice

Code modifications:
Open Themes/default_modern/index.template.php
Find:

if ($context['current_action'] == 'search2')

$current_action = 'search';
Add after:
        // SMFShop

if ($context['current_action'] == 'shop')

$current_action = 'shop';
Also, find:

// The [calendar]!

if ($context['allow_calendar'])

echo ($current_action == 'calendar' || $context['browser']['is_ie4']) ? '<td class="maintab_active_' . $first . '">&nbsp;</td>' : '' , '

<td valign="top" class="maintab_' , $current_action == 'calendar' ? 'active_back' : 'back' , '">

<a href="', $scripturl, '?action=calendar">' , $txt['calendar24'] , '</a>

</td>' , $current_action == 'calendar' ? '<td class="maintab_active_' . $last . '">&nbsp;</td>' : '';
Add after:

// The shop

echo ($current_action == 'shop' || $context['browser']['is_ie4']) ? '<td class="maintab_active_' . $first . '">&nbsp;</td>' : '' , '

<td valign="top" class="maintab_' , $current_action == 'shop' ? 'active_back' : 'back' , '">

<a href="', $scripturl, '?action=shop">Shop</a>

</td>' , $current_action == 'shop' ? '<td class="maintab_active_' . $last . '">&nbsp;</td>' : '';
Then, your shop button should be working