May 19, 2013, 05:19:27 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  Show Posts
Pages: 1 ... 14 15 [16] 17
226  BTITeam / [BTITeam] Comunications / Btit V.1.2 Is Out on: October 22, 2005, 05:23:43 PM
Btit Tracker v.1.2
---------------
FIXES:
- All known and found security hole
CHANGES:
- shoutbox: compact shoutbox (by brainphreak)
- peers: better client recognition
- torrents: sorting by different fields ascending/descending
- users: sorting by different fields ascending/descending
- torrents: modified Torrent.ext.int.display.v1-nwfr by hoha (show (EXT) if external near the torrent name)
NEW:
- block: seedwanted
- userdetails: active torrents by petr1fied
- torrent's details: files in torrents
- torrent's details: basic comments moderation (delete)
- account: valid email check on signup - by vibes
- admincp: masspm by vibes
- admincp: prune dead torrents/inactive users
- usercp: delete PM with checkboxes - by gAnDo
- sanity: *.png files (created by image code) are delete each sanity call
- admincp: New option, use popup or not (default is true)

List of changed/new files:
.\account.php   
.\account_change.php   
.\admincp.php   
.\announce.php   
.\changelog.txt   
.\comment.php   
.\details.php   
.\download.php   
.\edit.php   
.\extra-stats.php   
.\forum.php   
.\index.php   
.\news.php   
.\peers.php   
.\recover.php   
.\searchusers.php   
.\torrents.php   
.\upload.php   
.\usercp.php   
.\userdetails.php   
.\blocks\forum_block.php   
.\blocks\lastmember_block.php   
.\blocks\lasttorrents_block.php   
.\blocks\mainmenu_block.php   
.\blocks\maintrackertoolbar_block.php   
.\blocks\news_block.php   
.\blocks\online_block.php   
.\blocks\seedwanted_block.php   (NEW)
.\blocks\shoutbox_block.php   
.\blocks\toptorrents_block.php   
.\blocks\trackerinfo_block.php   
.\include\blocks.php   
.\include\config.php   
.\include\functions.php   
.\include\getscrape.php   
.\include\masspm.php      (NEW)
.\include\prune_torrents.php   (NEW)
.\include\prune_users.php   (NEW)
.\include\sanity.php   

The modified files are a lot, for fix/modify your personalized tracker you should use a comparing tool (like windiff or similar) and compare actual v.1.2 with v.1.1, sorry but I really don't have the time to make the list with change for each file, sorry  Sad

Download: http://www.btiteam.org/demo/download.php?i...r%201.2.torrent (http://www.btiteam.org/demo/download.php?id=b64065630f21787400070b9ad56e51f76e2bbec5&f=BtitTracker%201.2.torrent)
227  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 21, 2005, 03:25:40 PM
Quote
First sorry for my bad english Sad
what  are  Btittracker V.1.1 administration
 Nick:
 Password:

 sorry for my bad english  :unsure:
there is no default admin user in btit, you must signup yourself, and then go directly in DB and change your id_level to 8 (maybe read the readme.txt Wink)
228  BTITeam / [BTITeam] Comunications / Next Release on: October 19, 2005, 04:07:54 PM
Quote
That good to hear Lupin.
Will the code updates be documented again like you did with 1.1 as my code is already too modified to just replace the php files.
this will be very hard, since a lot, really a lot (maybe all?) have something changed...
if i get time, i'll try to document change for customized trackers
229  BTITeam / [BTITeam] Comunications / Next Release on: October 19, 2005, 09:32:52 AM
BtitTracker is not dead!

Since v.2 seems to be more late than I would (this because v.2 will probably be completly new), I've decided to continue with v.1.x fixing bugs (security and other) and adding some nice features (more release with each one some little nice features is better than 1 big release with a lot of modifications Wink).

v 1.2 will be out before the end of this week, it will be a lot of fixes and some nice features, no DB updates.

v.1.3 will be out when ready Cheesy, but will have more feature and maybe the DB should be updated (the goal is to get some of the pleasuredome combined with hackcp v.3 features), and maybe will be optimized in some parts.

Of course all help/support is appreciate:)
 
230  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 19, 2005, 09:17:44 AM
Quote
hey lupin..if you can compare this 1.1 to pleasuredome..how much handy you think the other one is to this..coz me on 1.0 atm and thinkin abt upgrading to pleasuredome...now saw 1.1 ..

another query..is it possible to upgrade to pleasuredome or what ?
I'll not support pleasuredome ed. sorry, but surely you must add all security fix to pleasuredome to be secure.
n.b. version 1.2 will be out before end of the week, had a lot of security fixes and some nice new feature...  
231  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 18, 2005, 08:59:34 AM
Quote
Hi,

On the account.php page I got this error:

Warning: imagepng(): Unable to open 'torrents/46a92c.png' for writing in /usr/local/psa/home/vhosts/pyrotorrents.org/httpdocs/btitracker_11/include/functions.php on line 1743

Can anyone tell me what to fix in order to see that verification image please?

Thanks,

AeNiMa666
chmod your "torrents" folder to 0777
232  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 07, 2005, 08:43:03 AM
Sorry, in account.php

find:
Code:
if (extension_loaded('gd'))
 {
 $public=$_POST['public_key'];
 $private=$_POST['private_key'];

   $p=new ocr_captcha();

   if ($p->check_captcha($public,$private) != true)
       {
       print(ERROR." ".ERR_IMAGE_CODE."<br>");
       print("<a href=account.php>".BACK."</a>");
       block_end();
       exit;
   }
 }
replace with
Code:
if (extension_loaded('gd'))
 {
 $arr = gd_info();
 if ($arr['FreeType Support']==1)
   {
 $public=$_POST['public_key'];
 $private=$_POST['private_key'];

   $p=new ocr_captcha();

   if ($p->check_captcha($public,$private) != true)
       {
       print(ERROR." ".ERR_IMAGE_CODE."<br>");
       print("<a href=account.php>".BACK."</a>");
       block_end();
       exit;
   }
  }
 }

 
233  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 04, 2005, 09:20:06 AM
Quote
Quote
gd library detection should be automatic into account.php... did you get some errors?
Just the usual:
Quote
Fatal error: Call to undefined function: imagettftext() in /.../.../public_html/tracker/include/functions.php on line 1713.

After the image code input field i get nothing else, just the error.

Is it possible to enable gd library via htaccess?
seems that gd library is enable, but freetype library (also required) is not. try to find a turn around, sorry...
in account serch for
Code:
if (extension_loaded('gd'))
  {
   $p=new ocr_captcha();

   print("<tr>\n\t<td align=left class=\"header\">".IMAGE_CODE.":</td>");
   print("\n\t<td align=left class=\"lista\"><input type=text name=private_key value='' maxlength=6 size=6>\n");
   print($p->display_captcha(true));
   $private=$p->generate_private();
   print("</td>\n</tr>");
  }
replace with
Code:
if (extension_loaded('gd'))
  {
  $arr = gd_info();
  if ($arr['FreeType Support']==1)
  {
   $p=new ocr_captcha();

   print("<tr>\n\t<td align=left class=\"header\">".IMAGE_CODE.":</td>");
   print("\n\t<td align=left class=\"lista\"><input type=text name=private_key value='' maxlength=6 size=6>\n");
   print($p->display_captcha(true));
   $private=$p->generate_private();
   print("</td>\n</tr>");
  }
}

not tested, let me know if it work.
234  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 03, 2005, 11:09:42 AM
HowTo upgrading manualy your tracker

account.php
search for
Code:
// -----------------------------
// Captcha hack
// -----------------------------
   $p=new ocr_captcha();

   print("<tr>\n\t<td align=left class=\"header\">".IMAGE_CODE.":</td>");
   print("\n\t<td align=left class=\"lista\"><input type=text name=private_key value='' maxlength=6 size=6>\n");
   print($p->display_captcha(true));
   $private=$p->generate_private();
   print("</td>\n</tr>");
// -----------------------------
// Captcha hack
// -----------------------------
}
Replace with
Code:
// -----------------------------
// Captcha hack
// -----------------------------
if (extension_loaded('gd'))
  {
   $p=new ocr_captcha();

   print("<tr>\n\t<td align=left class=\"header\">".IMAGE_CODE.":</td>");
   print("\n\t<td align=left class=\"lista\"><input type=text name=private_key value='' maxlength=6 size=6>\n");
   print($p->display_captcha(true));
   $private=$p->generate_private();
   print("</td>\n</tr>");
  }
// -----------------------------
// Captcha hack
// -----------------------------
}

search for
Quote
$public=$_POST['public_key'];
$private=$_POST['private_key'];

$p=new ocr_captcha();

    if ($p->check_captcha($public,$private) != true)
       {
        print(ERROR." ".ERR_IMAGE_CODE."<br>");
        print("<a href=account.php>".BACK."</a>");
        block_end();
        exit;
    }

replace with
Code:

if (extension_loaded('gd'))
  {
  $public=$_POST['public_key'];
  $private=$_POST['private_key'];

    $p=new ocr_captcha();

    if ($p->check_captcha($public,$private) != true)
        {
        print(ERROR." ".ERR_IMAGE_CODE."<br>");
        print("<a href=account.php>".BACK."</a>");
        block_end();
        exit;
    }
  }

usercp.php
search for
Code:
    elseif ($do=="user" && $action=="post")
        {
        if ($_POST["confirm"]==FRM_CONFIRM)
           {
           $idlangue=0+$_POST["language"];
           $idstyle=0+$_POST["style"];
           $email=$_POST["email"];
           $avatar=$_POST["avatar"];
           $idflag=0+$_POST["flag"];
replace with
Code:
    elseif ($do=="user" && $action=="post")
        {
        if ($_POST["confirm"]==FRM_CONFIRM)
           {
           $idlangue=0+$_POST["language"];
           $idstyle=0+$_POST["style"];
           $email=AddSlashes($_POST["email"]);
           $avatar=AddSlashes($_POST["avatar"]);
           $idflag=0+$_POST["flag"];


functions.php
search for
Code:
function makesize($bytes) {
  if ($bytes < 1000 * 1024)
    return number_format($bytes / 1024, 2) . " KB";
  if ($bytes < 1000 * 1048576)
    return number_format($bytes / 1048576, 2) . " MB";
  if ($bytes < 1000 * 1073741824)
    return number_format($bytes / 1073741824, 2) . " GB";
  return number_format($bytes / 1099511627776, 2) . " TB";
}
replace with
Code:
function makesize($bytes) {
  if (abs($bytes) < 1000 * 1024)
    return number_format($bytes / 1024, 2) . " KB";
  if (abs($bytes) < 1000 * 1048576)
    return number_format($bytes / 1048576, 2) . " MB";
  if (abs($bytes) < 1000 * 1073741824)
    return number_format($bytes / 1073741824, 2) . " GB";
  return number_format($bytes / 1099511627776, 2) . " TB";
}

upload.php
search for
Code:
if (isset($_POST["filename"]))
   $filename=$_POST["filename"];
else
    $filename = StripSlashes($_FILES["torrent"]["name"]);

if (isset($hash) && $hash) $url = $TORRENTSDIR . "/" . $hash . ".btf";
else $url = 0;

if (isset($_POST["info"]))
   $comment = addslashes($_POST["info"]);
else
    $comment = "";
replace with
Code:
if (isset($_POST["filename"]))
   $filename=htmlentities($_POST["filename"]);
else
    $filename = StripSlashes($_FILES["torrent"]["name"]);

if (isset($hash) && $hash) $url = $TORRENTSDIR . "/" . $hash . ".btf";
else $url = 0;

if (isset($_POST["info"]))
   $comment = htmlentities(addslashes($_POST["info"]));
else
    $comment = "";

That's all.
235  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 03, 2005, 08:57:42 AM
Quote
First sorry for my bad english Sad

are is this upgrade for Btit v.1 Pleasuredome edition too?

thanks and nice job
I think it's not OK for pleasuredome edition, asap I'll post the exact corrections to upgrade by hand.
236  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 03, 2005, 08:55:56 AM
gd library detection should be automatic into account.php... did you get some errors?
237  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 02, 2005, 11:12:12 AM
as soon as i get time to post it, I'll post the change to fix your tracker manualy, so anyome with customized site could fix himself.
238  BTITeam / [BTITeam] Comunications / Btittracker V.1.1 Fixed Version on: October 01, 2005, 06:51:17 PM
UPGRADE TO V.1.1 IS RECOMMENDED TO ALL WEBMASTER

- account.php:
   + fixed: fatal error if gd library not set
- usercp.php:
   + fixed: hack sql injection code on avatar url
- functions.php:
   + fixed: makesize function with negative parameters
- upload.php:
   + fixed: malicious code in torrent filename/info.

Download link:
http://www.btiteam.org/index.php?ind=downl...ry_view&iden=44 (http://www.btiteam.org/index.php?ind=downloads&op=entry_view&iden=44)
239  BTITeam / [BTITeam] Comunications / Developers Team on: September 08, 2005, 10:49:31 AM
Quote
As stated before, I would be glad to help out; coders side. I have already been working on a few things that are currently in development. I would be glad to share
welcome on board Smiley
240  BTITeam / [BTITeam] Comunications / Developers Team on: September 05, 2005, 03:12:27 PM
yes, all translators are welcome, of course will be the last "stage" before official release...  
Pages: 1 ... 14 15 [16] 17

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
xBtit_Default by: TreetopClimber © 2006,2007 | Back To Top
Valid XHTML 1.0! Valid CSS!

Recommended: Wholesale Computers - dresses - Wow Gold - Auto Diagnostic Tool
Online shopping at tmart.com and Worldwide Free Shipping - Get great dresses deals at dressale.com
your link here, contact lupin @ btiteam.org for more info

MKPortal ©2003-2006 mkportal.it