Menu
▾
▴
phpay-newsletter — News arround phPay - updates, bugfixes ...
You can subscribe to this list here.
| 2002 |
Jan
|
Feb
|
Mar
(2) |
Apr
(4) |
May
(1) |
Jun
(1) |
Jul
|
Aug
(2) |
Sep
|
Oct
|
Nov
(1) |
Dec
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2003 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
(1) |
|
From: Stefaan C. <ste...@pa...> - 2003-12-30 00:23:29
|
Hi all, I am new to PhPay and this list. I am running into issues installing PhPay onto my IIS + PHP + MySQL After seting up the DB and the condig files and going to index.html (the = shops homepage) I get: Notice: Undefined variable: db_func_loaded in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 11 Notice: Undefined variable: mode in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 22 Notice: Undefined variable: caller in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 36 Notice: Undefined variable: mode in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 61 Notice: Undefined variable: mode in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 64 Notice: Undefined variable: caller in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 67 Notice: Undefined variable: caller in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 81 Notice: Undefined variable: caller in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 95 Notice: Undefined variable: caller in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 99 Notice: Undefined variable: caller in = D:\data\sites\phpayV202a\phpayv2.02a\login.php on line 103 Any help welcome. Tx, Stefaan |
|
From: Andreas K. <an...@ka...> - 2003-09-26 20:31:19
|
Detected by Christian:
The vulnerable file is uupd.inc.php, which
carries out following query:
$user_result = db_query("select * from user where ID='$user_ID'") or db_die();
pay.php uses following output to create the edit formular:
<input type=hidden name=user_ID value=\"$user_row[0]\">. S
imply changing the value in the html file allows to update whatever user
profile you desire to change, including the account's password by creating a
request with a changed user_id.
thus it's possible to edit every user profile and log in as the new user.
all recent versions are affected.
This information is right. Under
http://sourceforge.net/tracker/index.php?func=detail&aid=813260&group_id=39285&atid=424796
and in CVS is a fixed uupd.inc.php.
Before line with '$user_result ...' an include("./lib.inc.php"); is added.
--
Have a lot of fun and success with phPay,
Andreas Kansok
JavaScript: http://www.amazon.de/exec/obidos/ASIN/3827319730/kansokde-21
Shopsystem NEU! Version 1.3: http://demo.shopwiesel.de/admin/
|
|
From: Andreas K. <an...@ka...> - 2003-01-26 15:33:24
|
+++++ New release +++++ This version has not too many new features. It is more a bugfixed one, so you dont need to code before use ;-) + Any item can be in every itemgroup. + Default language/currency can be set in configuration. + Mail for new users can switched off in configuration. + Search works with more then one word (thanks to Hille). + Second propertiy files included (thanks to Peter471). + db_query() can work with prefix for all tables. Set it in db_func.inc.php. + danish, english, french, german and spanish language files come within archiv. + Lot's of bugfixes done. Statitics are implemented with JPgraph. It need gd-lib installed. Older statistic files and data cant be used with new system (or you have to code something ;-) - Import/Export not really works, there is to do something ... You'll find archives under: http://sourceforge.net/project/showfiles.php?group_id=39285 +++++++ +++++ CVS activated +++++ Together with release of v2.02 CVS service starts. It is organized by sf.user svenka. +++++++ -- Have a lot of fun and success with phPay, Andreas Kansok PHP: http://www.nitty-gritty.de/main/main.asp?page=Bookdetails&ProductID=13385 JavaScript: http://www.amazon.de/exec/obidos/ASIN/3827319730/kansokde-21 |
|
From: Andreas K. <an...@ka...> - 2002-11-21 18:58:32
|
1) Update phPay with second property 2) Reference list -------------- (1) Short after 1st birthday of phPay, we proudly present a small update, which adds an second property to any item in your shop. It's made by Peter (he has done the translation tool before). I never tested myself, but I trust him ;-) If you have any questions write them into forum under: http://sourceforge.net/forum/?group_id=39285 Download you'll find under: http://sourceforge.net/project/showfiles.php?group_id=39285 --------------- (2) Under http://phpay.sourceforge.net you'll find a list with different location where phPay works. Feel free to send others to in...@ph... I check and release them there. -- Greetings, Andreas Kansok |
|
From: Andreas K. <an...@ka...> - 2002-08-25 16:18:19
|
Next release with statistics, CSV-import/export and other smaller changes is planned for November 2002. Help-file expansion: As described in help (http://phpay.de/admin/help.php?langID=2#langinc) language with ID=1 is default one. Same procedure for currency. The shop itself: Way1 (recommended): Change in admin-area the values of the first language to your favorit. Way2: Use a database-tool (i.e. phpMyAdmin for mySQL) to change the ID's directly in table language. Way3: Change files with editor: start.php line 28: insert into online ... '$ip', '<your default langID'>, '<your default curr.>','','') ...; lib.inc.php line 6: $langID= <your default langID>; } line 14 ... $curID=<your default curID>; } admin-area (Only together with Way3 needed): index.php line 9: ... $langID= <your default langID>; } lang.inc.php line 2: ... $langID= <your default langID>; } header.inc.php line 16: ... $curID=<your default curID>; ... (in next release there will be an option ;-) -- Greetings, Andreas Kansok |
|
From: Andreas K. <an...@ka...> - 2002-08-03 07:35:38
|
Because there are a lot of problems running phPayV2 with PostgreSQL now a new forum is available: http://sourceforge.net/forum/forum.php?forum_id=199615 Start of comments is under: http://sourceforge.net/forum/forum.php?thread_id=712971&forum_id=121973 -- Greetings, Andreas Kansok |
|
From: Andreas K. <an...@ka...> - 2002-06-22 19:56:45
|
Release Name: V2.01 Notes: - Some smaller bugfixes. - Now it is possible to use two different VAT.=20 - Backup and backup-files from other versions won't work. - Also the second property 'color' is unused yet. Both will be done soon, but lot's of other work, summer ... ;-) - A begin of statistics is included. Changes: Two tables are added (but unused yet): color und colorinfo Three tables are altered: item, pricetype and usrgroup. Visit /admin/doc/*.sql for details. Following files changed: mailer.inc.php show_content.inc.php payed.php cart.php lib.inc.php show_cart.inc.php functions.inc.php detail.php show_item_* and in admin-area: pricetype.php payment.php shipment.php item.php usrgroup.phpThis is first complete useable version of the complete=20 reconstructed and=20 organized shop- and catalog-system phPay. Final release will come on May 1st. Only bugfixes and last test with all option are open. Translations also f= or=20 helpfiles in admin-area. Visit the doc-folders in archiv to learn all about the feature built in t= his=20 version. Demo is available on sunday (June, 23 ;-) under http://www.phpay.de=20 If you don't need more then one VAT update is not needed. Die Einf=FChrung ist vorallem f=FCr die Lebensmittel und B=FCcherbranche = in=20 Deutschland gedacht, der es schon lange versprochen war. Ich wei=DF nicht= , ob=20 es das auch in anderen L=E4ndern gibt. --=20 Greetings, Andreas Kansok Der Shop: http://phpay.sourceforge.net Das Buch:=20 http://www.amazon.de/exec/obidos/ASIN/3827319730/ref=3Dase_kansokde-21/30= 2-552 8324-0756805 |
|
From: Andreas K. <an...@ga...> - 2002-05-03 16:57:19
|
Archivs are updated today. http://sourceforge.net/project/showfiles.php?group_id=39285 Please visit change-notes for details. |
|
From: Andreas K. <an...@ga...> - 2002-04-22 10:45:04
|
This is first complete useable version of the complete reconstructed and organized shop- and catalog-system phPay. Final release will come on May 1st. Only bugfixes and last test with all option are open. Translations also for helpfiles in admin-area. Visit the doc-folders in archiv to learn all about the feature built in this version. Demo is available under http://galileoo.net/phpayv2/ . After final release it will be moved to http://phpay.sourceforge.net -- Greetings, Andreas Kansok |
|
From: Andreas K. <an...@ga...> - 2002-04-21 20:34:49
|
This is first complete useable version of the complete reconstructed and organized shop- and catalog-system phPay. Final release will come on May 1st. Only bugfixes and last test with all option are open. Translations also for helpfiles in admin-area. Visit the doc-folders in archiv to learn all about the feature built in this version. Demo is available under http://galileoo.net/phpayv2/ . After final release it will be moved to http://phpay.sourceforge.net -- Greetings, Andreas Kansok |
|
From: Andreas K. <an...@ga...> - 2002-04-14 11:00:46
|
Dear subscriber, new archives of phPay Version2 are released today! Please read Changes and Notes under http://sourceforge.net/project/showfiles.php?group_id=39285 This version is like a 'release candidate' but not enough test are passed :-( -- Best regards, Andreas. |
|
From: Andreas K. <an...@ga...> - 2002-04-04 22:17:53
|
Lot's of options and features are implemented: - limited view with forward and back links - crossreferences to other items - stock of items - great admin-area (visit online-demo under http://kansok.com/phpayv2/admin/ ) - possible to include normal links into navigationbar - every item, itemgroup and categorie can be placed (orderby) - visible/hidden-flag for items - databse-structure optimized for multi-language support - nice translation-tool follows --------- Updates of preview files will be replaced here in files-area. Archives updated: 04.04.2002 --------- Next steps are: - CSV-imports - create_db.inc.php - database-backup -- Greetings, Andreas |
|
From: Andreas K. <an...@ga...> - 2002-03-28 02:25:42
|
Simply overwrite existing files. -- Andreas. |
|
From: Andreas K. <an...@ga...> - 2002-03-23 15:09:41
|
This version of phPayV2 is not recommended for professional use. It is more like a beta or prelease. Support- and featurerequests you can send to mailto:so...@ph...?Subject=phPayV2, but answer will come after final release (middle of April). ------------------ Installation: - extract archiv - upload files - create database - create user to use this database (or get this information by your provider) - enter in your browser location http://your-domain.com/phpayv2/admin - choose 'database-parameters' and give the required informations to write admin/config_db.inc.php - create tables - choose 'configuration' to write config.inc.php for your shop (two *.orig-configfiles come with archiv to edit them if admin not(!) works) - enter your items, users ... - please check, if password of 'user public' corresponds with the one givven in start.php ---------------- Known bugs: - shippping and payment methods are not completly implemented. - PHP4.02B don't know is_uploaded(). Some things not implemented yet, but will be in final release: - upgrade-tool for v1.05 - data-import from CSV-file (items,users,itemgroups, Abteilungen) - to more options fpr every item (size+color) - complete translation of admin-area -- Greetings, Andreas. |
