Release date:Updated on:
Affected Systems:Joomla! CivicrmDescription:--------------------------------------------------------------------------------Bugtraq id: 59372Joomla Civicrm is an organizational unit member relationship management system.The Joomla Civicrm component has the Arbitrary File Upload Vulnerability. Attackers can exploit this vulnerability to upload arbitrary files to the affected system, resulting in arbitrary code execution.*>
Test
The usage is as follows:Enter the following code at the top of the page for using the form function:JHTML: _ ('behavior. formvalidation ');Add the following script to the page.Copy codeThe Code is as follows: Modify the code at the form LocationCopy codeThe Code is as follows: After the above Code is added, you only need to add class = "required" to the input in form, and the verification function will take effect.The joomla verification script is imp
Test method:The Program (method) provided on this site may be offensive and only used for security research and teaching. You are at your own risk! # Exploit Title: Joomla Component Multi-Venue Restaurant Menu Manager SQL Injection Vulnerability# Date: 11.04.2010# Author: Valentin# Category: webapps/0day# Version:# Tested on:# CVE:# Code:: General information: Joomla Component Multi-Venue Restaurant Menu Ma
Release date:Updated on:
Affected Systems:Joomla! Sexy Polling Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-7219
Sexy Polling is a customizable voting software.
The Joomla extension Sexy Polling 1.0.8 does not properly filter the "answer_id []" POST parameter value of/components/com_sexypolling/vote. php, which can cause arbitrary SQL code injection.
Link: http://secunia.com/adv
The usage is as follows:
Enter the following at the top of the page for using the form function:
Code
JHTML: _ ('behavior. formvalidation ');
Add the following script to the page.
Copy code The Code is as follows:
Modify the code at the Form LocationCopy codeThe Code is as follows:
After the above Code is added, you only need to add class = "required" to the input in form, and the verification function will take effect.The joomla verification
No matter whether it is JCE or CKEDITOR, it does not solve the problem of the Chinese name file. Either the upload fails or the Chinese name is uploaded and cannot be accessed by the web. In contrast, JCE is more user-friendly. For example, after a file is uploaded, It is selected by default. You do not need to search for the uploaded file in a small pop-up window. The source code of JCE is studied, and the method of saving the file name is changed. Pure numbers are used as the file name.
Go
Ajax is rarely seen in joomla. I have mentioned that jquery is used for implementation. for applications that verify that the user name cannot be repeated, the mailbox cannot be repeated, and the linked menu, etc, the use of ajax is inevitable. today I will talk about how to implement ajax using the mootools javascript library that comes with joomla. because it comes with a library, you don't have to worry
Joomla caches data via Jcache:
//调用Cache,参数'com_campaign'为缓存组,必须!$cache= JFactory::getCache('com_campaign','');//设置:即使关闭全局缓存时,此缓存仍有效$cache->setCaching(true);//设置缓存时间,此处设置为 60s$cache->setLifeTime(60);//获取缓存$name=$cache->get('userid_101');if(!$name){ $str='my name is cache'; //设置缓存$cache->store($str,'userid_101');}echo '';print_r($name);exit;//移除缓存$cache->remove('userid_101');//获取全部缓存对象列表及简介$cache->getAll();//清除缓存组。第二个参数为:group|notgroup 默认为grou
Ajax is rarely seen in joomla. I have mentioned that jquery is used for implementation. for applications that verify that the user name cannot be repeated, the mailbox cannot be repeated, and the linked menu, etc, the use of ajax is inevitable. today I will talk about how to implement ajax using the mootools javascript library that comes with joomla. because it comes with a library, you don't have to worry
In Joomla, you can use configuration. php to store simple data code. For more information, see.
Write process
The code is as follows:
// Get the path of the configuration file$ Fname = JPATH_CONFIGURATION.DS. 'configuration. php ';// Clear cache$ Cache = JFactory: getCache ();$ Cache-> clean ();// Update the credentials with the new settings$ Config = JFactory: getConfig ();$ Config-> setValue ('config. custom_var ', 'XXX ');// Get the config
How do I obtain the parameters in joomla ??? The data in the images field is: {"image_intro": "images \/image1.jpg", "float_intro": "", "image_intro_alt": "", "image_intro_caption ":"", "image _ How do I obtain the parameters in the joomla document ???
The data in the images field is:
{"Image_intro": "images \/image1.jpg", "float_intro": "", "image_intro_alt": "", "image_intro_caption": "," image_fulltext "
A considerable number of users prefer to "download the original English version and then apply the Chinese Language Pack" for a Chinese DIY operation. This site provides independent joomla for these users who like to do it! 1.5.x simplified and Traditional Chinese Language Pack.Note:1. This Language Pack contains the language file of the installation directory (installation). If your original English version has been installed, do not upload this dire
Please recommend a good joomla mass mailing PHP module to help your friends make a marketing website. you need to send mails in mass mailing mode. I used joomla1.6 for my website. I don't know what modules are better? I have tried cb_mailing and hecmailing. their versions are relatively low and direct installation fails. Which modules are relatively mature? Including the above two ., Com_aiContactS please recommend a good
Joomla has its own form verification function, which can be easily used for verification. If the verification fails, the input box is marked with a red border when an error is reported. It is clear that the missing items are missing.
Joomla has its own form verification function, which can be easily used for verification. If the verification fails, the input box is marked with a red border when an error is
No matter whether it is JCE or CKEDITOR, it does not solve the problem of the Chinese name file. Either the upload fails or the Chinese name is uploaded and cannot be accessed by the web. In contrast, JCE is more user-friendly. For example, after a file is uploaded, It is selected by default. You do not need to search for the uploaded file in a small pop-up window. The source code of JCE is studied, and the method of saving the file name is changed. Pure numbers are used as the file name.Go to t
JFactory: getDBO usage of Joomla database operations, joomlagetdbo
This example describes how to operate a Joomla database using JFactory: getDBO. We will share this with you for your reference. The details are as follows:
JFactory is a static class used to obtain references of various system objects.
GetDBO is the method for obtaining database objects and obtains the database connection object code:
$
Whether it is JCE or ckeditor, did not solve the problem of Chinese name files, or upload failed, or passed up the Chinese name can not be Web access. In contrast, JCE more user-friendly, such as file upload by default is selected, do not need users in such a small pop-up window to go up and down search just uploaded files. Study the source of the next jce, change the way to save the file name, using pure numbers as the file name.
To Joomla installe
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.