Back to top

Autore Topic: Comment  (Letto 16042 volte)

Offline chibi

  • Esploratore
  • **
  • Post: 136
  • Sesso: Femmina
  • Chibi
    • Mostra profilo
Re: Comment
« Risposta #20 il: 28 Feb 2008, 11:33:03 »
stesso identico problema...ci sto sclerando da piu' di una settimana!!....ho guardato tutti i file...tutti i db del componente...ma niente...non c'e' assolutamente nulla!!! :| come cavolo si fa.?? bho...

per chi risponderà ringrazio anticipatamente... :D
...Non c'è peggior sordo di chi non vuol sentire!!..

Offline alexUC

  • Esploratore
  • **
  • Post: 125
    • Mostra profilo
Re: Comment
« Risposta #21 il: 10 Mar 2008, 14:30:57 »
imarra' un mistero? :(

sarà una stringa codificata comunque

Offline pataranda

  • Nuovo arrivato
  • *
  • Post: 4
    • Mostra profilo
Re: Comment
« Risposta #22 il: 11 Mar 2008, 15:31:55 »
Ciao, fai una ricerca dei file mxcomment che contengono:
eval(stripslashes(base64_decode(

poi aiutati con questo sito:
http://www.opinionatedgeek.com/dotnet/tools/Base64Decode/Default.aspx

 ;) by presidio!!
« Ultima modifica: 11 Mar 2008, 16:06:31 da pataranda »

Offline chibi

  • Esploratore
  • **
  • Post: 136
  • Sesso: Femmina
  • Chibi
    • Mostra profilo
Re: Comment
« Risposta #23 il: 11 Mar 2008, 15:46:08 »
ciao!! scusami ma non capisco che devo fare....  ??? ???
potresti spiegarti meglio? ciao...
...Non c'è peggior sordo di chi non vuol sentire!!..

Offline pataranda

  • Nuovo arrivato
  • *
  • Post: 4
    • Mostra profilo
Re: Comment
« Risposta #24 il: 11 Mar 2008, 16:04:30 »
ricerca all'interno delle pagine mxcomment (per esempio alla riga 203 del file  components\com_maxcomment\includes\maxcomment.utils.php) la stringa "eval(stripslashes(base64_decode"

Quello che c'è sotto (in rosso) è tutto codificato e lo puoi decodificare al link che ho mandato.

« Ultima modifica: 11 Mar 2008, 16:06:14 da pataranda »

Offline Walter Ego

  • Appassionato
  • ***
  • Post: 532
    • Mostra profilo
Re: Comment
« Risposta #25 il: 18 Mar 2008, 10:53:36 »
Pataranda... GRAZIE GRAZIE GRAZIE  ;D ;D ;D

Offline fmc_alfredo

  • Nuovo arrivato
  • *
  • Post: 44
  • Sesso: Maschio
    • Mostra profilo
Re: Comment
« Risposta #26 il: 23 Mar 2008, 18:19:55 »
Allora, come diceva pataranda la modifica va fatta proprio nel file components\com_maxcomment\includes\maxcomment.utils.php
sostituendo la riga
Codice: [Seleziona]
eval(stripslashes(base64_decode(" ...

con il suo equivalente decodificato.
Una volta decodificato si ottiene questo codice che va sostituito appunto alla stringa eval ecc. ecc.
Codice: [Seleziona]
function _getTitleComment() {
global $mosConfig_live_site, $mosConfig_absolute_path, $database, $COMMENT;

require($mosConfig_absolute_path.'/administrator/components/com_maxcomment/maxcomment_config.php');

if ( $COMMENT->title ) {
// Bad words
if ( $mxc_badwords ){
$query = "SELECT * FROM #__mxc_badwords WHERE published='1'";
$database->setQuery( $query );
$rowsbadwords = $database->loadObjectList();
if ( $rowsbadwords ) {
foreach ( $rowsbadwords as $rowbadword ) {
$badword = trim( $rowbadword->badword );
$replacebadword = str_repeat( '*', strlen( $badword ) );
$replacebadword = "\$1".$replacebadword."\$2";
$COMMENT->title = preg_replace("/(\W|^)$badword(\W|$)/i", $replacebadword, $COMMENT->title);
}
}
}
echo stripslashes( $COMMENT->title );

} else echo "...";
}

function _getCommentText() {
global $mosConfig_live_site, $mosConfig_absolute_path, $database, $COMMENT;

require($mosConfig_absolute_path.'/administrator/components/com_maxcomment/maxcomment_config.php');

// Prepare smiley array
$smiley[':)']     = "sm_smile.gif";    $smiley[':grin']  = "sm_biggrin.gif";
$smiley[';)']     = "sm_wink.gif";     $smiley['8)']     = "sm_cool.gif";
$smiley[':p']     = "sm_razz.gif";     $smiley[':roll']  = "sm_rolleyes.gif";
$smiley[':eek']   = "sm_bigeek.gif";   $smiley[':upset'] = "sm_upset.gif";
$smiley[':zzz']   = "sm_sleep.gif";    $smiley[':sigh']  = "sm_sigh.gif";
$smiley[':?']     = "sm_confused.gif"; $smiley[':cry']   = "sm_cry.gif";
$smiley[':(']     = "sm_mad.gif";      $smiley[':x']     = "sm_dead.gif";

$commentText = stripslashes( $COMMENT->comment );
// Bad words
if ( $mxc_badwords ){
$query = "SELECT * FROM #__mxc_badwords WHERE published='1'";
$database->setQuery( $query );
$rowsbadwords = $database->loadObjectList();
if ( $rowsbadwords ) {
foreach ( $rowsbadwords as $rowbadword ) {
$badword = trim( $rowbadword->badword );
$replacebadword = str_repeat( '*', strlen( $badword ) );
$replacebadword = "\$1".$replacebadword."\$2";
$commentText = preg_replace("/(\W|^)$badword(\W|$)/i", $replacebadword, $commentText);
}
}
}
$commentText = mxcParse( $commentText, $smiley, $mxc_bbcodesupport, $mxc_picturesupport, $mxc_smiliesupport, $mosConfig_live_site );
$commentText = htmlwrap( $commentText, $mxc_lengthwrap );

echo $commentText;
}

function _getNoticeCopyright(){
global $mosConfig_absolute_path, $COMMENT;

require($mosConfig_absolute_path.'/administrator/components/com_maxcomment/version.php');

$copyStart = 2007;
$copyNow = date('Y');
if ($copyStart == $copyNow) {
$copySite = $copyStart;
} else {
$copySite = $copyStart."-".$copyNow ;
}

$noticeCopyright = "<br /><div style=\"clear:both;text-align:center;\"><span class=\"small\"><br />mXcomment " . _MAXCOMMENT_NUM_VERSION . " DIGO - &nbsp;&copy;&nbsp;";
$noticeCopyright .= $copySite . " - <a href=\"http://www.visualclinic.fr\" target=\"_blank\">visualclinic.fr</a> - ";
$noticeCopyright .= "Licenza <a rel=\"license\" href=\"http://creativecommons.org/licenses/by-nc-nd/3.0/\">Creative Commons</a><br />";
$noticeCopyright .= "Modificato da Fiuh!Team - <a href=\"http://www.fiuh.it/\">FIUH.it</a> - Alcuni diritti riservati</span></div>";

echo $noticeCopyright;
}

function _getDateComment() {
global $mosConfig_absolute_path, $COMMENT;

require($mosConfig_absolute_path.'/administrator/components/com_maxcomment/maxcomment_config.php');
$datecomment = "";

if ( intval( $COMMENT->date ) != 0 ) {
$datecomment = mosFormatDate( $COMMENT->date, $mxc_fdate );
}
echo $datecomment;
}

function _getReportComment() {
global $mosConfig_live_site, $mosConfig_absolute_path, $mosConfig_lang, $Itemid, $task, $COMMENT;

// Get the right language if it exists
if (file_exists($mosConfig_absolute_path."/administrator/components/com_maxcomment/languages/".$mosConfig_lang.".php")){
include_once($mosConfig_absolute_path."/administrator/components/com_maxcomment/languages/".$mosConfig_lang.".php");
}else{
include_once($mosConfig_absolute_path."/administrator/components/com_maxcomment/languages/english.php");
}

require($mosConfig_absolute_path.'/administrator/components/com_maxcomment/maxcomment_config.php');
$report = "";
if( $mxc_report ){
$link = sefRelToAbs( 'index.php?option=com_maxcomment&amp;task=report&amp;id=' . $COMMENT->id . '&amp;cid=' . $COMMENT->contentid . '&amp;Itemid=' . $Itemid );
$report = "<a href='" . $link . "'>" . _MXC_REPORTTHISCOMMENT . "</a>";
if ( $task=='report' ) $report = _MXC_REPORTTHISCOMMENT;
}
echo $report;
}

function _getReplyComment() {
global $mosConfig_live_site, $mosConfig_absolute_path, $mosConfig_lang, $Itemid, $task, $COMMENT, $_MXC;

// Get the right language if it exists
if (file_exists($mosConfig_absolute_path."/administrator/components/com_maxcomment/languages/".$mosConfig_lang.".php")){
include_once($mosConfig_absolute_path."/administrator/components/com_maxcomment/languages/".$mosConfig_lang.".php");
}else{
include_once($mosConfig_absolute_path."/administrator/components/com_maxcomment/languages/english.php");
}

require($mosConfig_absolute_path.'/administrator/components/com_maxcomment/maxcomment_config.php');

$width_popup  = ( intval($mxc_width_popup)>0 )? $mxc_width_popup : '420' ;
$height_popup = ( intval($mxc_height_popup)>0 )? $mxc_height_popup : '450' ;

$reply = "";
if( $mxc_reply ){
switch ( $mxc_openingmode ) {

case 0 :
$link = sefRelToAbs( 'index.php?option=com_maxcomment&amp;task=reply&amp;id=' . $COMMENT->id . '&amp;Itemid=' . $Itemid );
$reply = "<a href='" . $link . "'>" . _MXC_REPLYTOTHISCOMMENT . "</a>";
break;
case 1 :
$status = 'status=no,toolbar=no,scrollbars=yes,titlebar=no,menubar=no,resizable=yes,width='.$width_popup.',height='.$height_popup.',directories=no,location=no';
$link = $mosConfig_live_site . "/index2.php?option=com_maxcomment&amp;task=reply&amp;id=" . $COMMENT->id . "&amp;Itemid=" . $Itemid;
$reply = "<a href=\"" . $link . "\" target=\"_blank\" onclick=\"window.open('" . $link . "','win2','" . $status . "'); return false;\">" . _MXC_REPLYTOTHISCOMMENT . "</a>";
break;

}
}

if ( $task=='report' || $task=='viewallreplies' && $COMMENT->parentid > 0 || $_MXC->COMMENTCLOSED==true ) $reply = _MXC_REPLYTOTHISCOMMENT;

echo $reply;


}

Quindi a questo punto è facile individuare la funzione _getNoticeCopyright e modificarla per evitare di far apparire il messaggio.

PS.
Io ho avuto qualche problema con la decodifica fatta su quel sito indicato dal link postato in precedenza, per cui mi sono fatto un semplice script php:

Codice: [Seleziona]
<?php
$str 
stripslashes(base64_decode("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"));

print 
"$str";

?>

e l'ho eseguito in una finestra DOS (ovviamente io ho installato l'interprete PHP in locale sul mio PC.)

In ogni caso per la versione 1.0.6 di mxcomment la decodifica è quella che ho postato.

Ciao.

 



Web Design Bolzano Kreatif