Search found 611 matches

by EA117
Wed Jun 26, 2019 3:41 pm
Forum: Extensions in Development
Topic: [DEV] Encrypted PMs
Replies: 31
Views: 538

Re: [DEV] Encrypted PMs

Can we just drop a single set of keys in config.php and be done, knowing someone who absconds with the database still won't have what they need to decrypt it? That would be a really weaker protection. With current approach, your access to DB and filesystem won't suffice to decrypt the messages. Oka...
by EA117
Wed Jun 26, 2019 12:51 am
Forum: Extensions in Development
Topic: [DEV] Encrypted PMs
Replies: 31
Views: 538

Re: [DEV] Encrypted PMs

If our distrust of the site owner(s) runs deep enough to account for fagbutlil's earlier assertion of "easy to get the password during login" (which is true), then there isn't any extension within the web application that can counteract that lack of trust. Because if the site owner(s) are willing to...
by EA117
Tue Jun 25, 2019 6:50 pm
Forum: Extensions in Development
Topic: [DEV] Encrypted PMs
Replies: 31
Views: 538

Re: [DEV] Encrypted PMs

Another flaw take pm table out and place in another database and and set all users passwords to one and read away lol. That approach should not be successful. As part of protecting the private key by "encrypting it with the current user's password", this implies that any password change would need ...
by EA117
Tue Jun 25, 2019 2:22 pm
Forum: [3.2.x] Support Forum
Topic: Site stopped working with https?
Replies: 8
Views: 289

Re: Site stopped working with https?

Thank you runewolf, appreciate the additional information. To my eye this still indicates that the rule engaged at REQUEST_COOKIES:phpbb3_9ag8z_k in your case, because the regular expression (?:'\\xbf?\\x22|\\x22\\xbf?'|^\\+?$) matched against that cookie. So I'm assuming that we don't see the cooki...
by EA117
Tue Jun 25, 2019 4:36 am
Forum: [3.2.x] Support Forum
Topic: Changing Username
Replies: 2
Views: 123

Re: Changing Username

I've never actually done it. But there is a permission, which I've always seen denied by default, to allow the users to change their username. I expect that once the users have been allowed to change their username, yes it would change their username when viewing historic posts. Because it's the num...
by EA117
Mon Jun 24, 2019 11:53 pm
Forum: [3.2.x] Support Forum
Topic: phpBB error when users post?
Replies: 1
Views: 100

Re: phpBB error when users post?

That looks like https://tracker.phpbb.com/browse/PHPBB3-15507 which was addressed in phpBB 3.2.4 and later. So presumably you're running an older version, and could resolve it by updating to phpBB 3.2.7. The warning is something that was introduced in PHP 7.2 and later. So if your hosting provider a...
by EA117
Mon Jun 24, 2019 8:47 pm
Forum: [3.2.x] Support Forum
Topic: phpBB cookies causing problems with loading of site... ?
Replies: 16
Views: 395

Re: phpBB cookies causing problems with loading of site... ?

Something else just popped up. I had been successful logging into phpbb via FF w/ cookies turned off. But now I'm getting :Error code: SSL_ERROR_RX_RECORD_TOO_LONG after adding my username/password. But if I clear out the port number "80:" from the URL I can access the forum and I've been logged in...
by EA117
Mon Jun 24, 2019 7:51 pm
Forum: [3.2.x] Support Forum
Topic: phpBB cookies causing problems with loading of site... ?
Replies: 16
Views: 395

Re: phpBB cookies causing problems with loading of site... ?

I found a couple of the topics you referred to: My apologies, I thought I had already linked to runewolf's thread here, but now I see and remember why I did not. (Because this current issue hadn't been tied to a 403 response at the time.) But yes, several users, including multiple UK2 users, had in...
by EA117
Mon Jun 24, 2019 6:35 pm
Forum: [3.2.x] Support Forum
Topic: phpBB cookies causing problems with loading of site... ?
Replies: 16
Views: 395

Re: phpBB cookies causing problems with loading of site... ?

The "http-equiv=refresh / location.replace() document" that was quoted earlier is the 403 error document configured on the web server. So this site is having the same "I get an HTTP 403 as soon as phpBB cookies are saved for the site" that has been the subject of multiple other posts this week. The ...
by EA117
Mon Jun 24, 2019 6:32 pm
Forum: [3.2.x] Support Forum
Topic: Site stopped working with https?
Replies: 8
Views: 289

Re: Site stopped working with https?

Sure, it wouldn't hurt to see more information. The log report of "Pattern match (?:'\\xbf?\\x22|\\x22\\xbf?'|^\\+?$)" already seemed pretty specific. But on other sites having this same "cookies need to be cleared in order to not get 403" issue, the "k" cookie value isn't even set yet, and they're ...
by EA117
Mon Jun 24, 2019 5:35 pm
Forum: [3.2.x] Support Forum
Topic: phpBB cookies causing problems with loading of site... ?
Replies: 16
Views: 395

Re: phpBB cookies causing problems with loading of site... ?

"https' was in the server protocol field, but I hadn't enabled the Force server URL settings to "yes". So, I just tried it both ways and it doesn't seem to effect the results. Good. If you don't need it set to "Yes", and haven't been running with it set to "Yes", its definitely best to least it at ...
by EA117
Mon Jun 24, 2019 4:49 pm
Forum: [3.2.x] Support Forum
Topic: phpBB cookies causing problems with loading of site... ?
Replies: 16
Views: 395

Re: phpBB cookies causing problems with loading of site... ?

here's the redirect that keep stops the site from loading on Chrome and Safari ... <meta http-equiv="refresh" content="0;url=http://www.domainname.org/"> and here is what I found in the .htaccess file: ... RewriteRule ^(.*)$ https://www.domainname.org/$1 [R=301,L] Certainly if the successfully-rewr...
by EA117
Mon Jun 24, 2019 4:02 pm
Forum: [3.2.x] Support Forum
Topic: Cannot access v3.2.2 board Error 403
Replies: 22
Views: 519

Re: Cannot access v3.2.2 board Error 403

The conclusion runewolf came to in https://www.phpbb.com/community/viewtopic.php?f=556&t=2515111&p=15278591#p15278591 certainly fits the symptom being observed here. i.e. The hosting service either installed an updated set of mod_security rules -- or installed some other update which also included a...
by EA117
Mon Jun 24, 2019 12:34 pm
Forum: [3.2.x] Support Forum
Topic: Cannot access v3.2.2 board Error 403
Replies: 22
Views: 519

Re: Cannot access v3.2.2 board Error 403

So if nothing else, you could talk to the hosting provider specifically about that -- why am I unable enter http://www.973-eht-namuh-973.com/forum/nuclearfamily.gif into a web browser and view the file on my web site -- without having to even involve any phpBB-related questions. See what if any iss...
by EA117
Sun Jun 23, 2019 10:41 pm
Forum: Extension Writers Discussion
Topic: event folder
Replies: 19
Views: 424

Re: event folder

code a small extension. No one is denying that a small extension could leverage these event templates. Only that being able to leverage them from within a regular style would also be useful, and would provide additional flexibility for creating inherited styles that are less affected by future chan...

Go to advanced search