Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
4 registered (Gizmo, Jim, Outdoorking, 1 invisible), 28 Guests and 24 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 07/21/06
Posts: 1792
Top Posters (30 Days)
Ruben Rocha 187
Gizmo 107
Rick 100
Thelockman 83
driv 41
AllenAyres 35
Sirdude 29
ntdoc 28
Ian 24
ScriptKeeper 18
Latest Photos
My Home System
test photo gallery
Bernese Mountain Dogs
My Daimler
Dorado and shark
Page 1 of 2 1 2 >
Topic Options
Rate This Topic
#211812 - 05/12/08 01:23 AM 7.3 - footer
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1091
Loc: Berlin, Germany
I have 2 litte suggestions for the footer.tpl
1) replace the hardcode powered by with wordlet
2) remove the version from footer. If a security bug found this made it not so easy to identify your running version
line 48:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">Powered by UBB.threads&trade; {$VERSION}</a>

change to:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">{$lang.POWERED_BY} UBB.threads&trade;</a>
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211814 - 05/12/08 01:45 AM Re: 7.3 - footer [Re: Zarzal]
Ian Moderator Offline

***

Registered: 06/05/06
Posts: 4160
Loc: Essex, UK
One of the problems for Rick and Groupee is the fact that people remove and alter the copyright against the agreement that everyone makes when they purchase the script.

I think by putting it into the language file will make it easier for people to change the wording, whereas at the moment users have to physically alter a file.

The only way this would perhaps work is if the language file was not directly editable from the CP.

There are two sides to also displaying the version. It makes it easy to see which version is being run. I am also not sure that it is a security risk as it is the site owners responsibility to upgrade to the latest version. If owners do not update their scripts, I am not sure that Groupee can be held responsible for versions that have reached their EOL. Groupee have a responsibility to ensure that the latest version (currently 7.3) is free of any security holes, but not versions that are 2 or 3 versions old.

I am only speaking from my own thoughts on the subject, and do not know what the company line is.
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211816 - 05/12/08 01:59 AM Re: 7.3 - footer [Re: Ian]
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1091
Loc: Berlin, Germany
the running version is shown in the admin section. This should be enough. Displaying the version public made it easy to find the propper boards using google. If you dont show the version you must try more board if you test a exploit.
Ok, its not a big thing.

Wordlet: As you see I only take the powered by. The rest is in the footer hardcode. The powered by string is also used for the browser top line while wathing the portal. This gives me the option in different languages to translate the powered by string without touching the UBBthreads™ and the link.
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211817 - 05/12/08 02:50 AM Re: 7.3 - footer [Re: Zarzal]
Gizmo Moderator Online   sleepy

***

Registered: 06/04/06
Posts: 12008
Loc: Portland, OR; USA
Whereas I'm against moving the powered by to a language file (agree with ian), I am for removing the version number for the security mention.
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#211867 - 05/12/08 10:12 AM Re: 7.3 - footer [Re: Gizmo]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1885
Loc: NJ

"Powered by" should be in the language file (agree with Zarzal lol) because in another language people might not understand what it means. Those two words have nothing to do with the copyright statement, but help them understand that it is a copyright.

I liked the old hover-over for the version number in 7.1, not sure if search engines would see it or not? It's good to know the version number another site is using if trying to debug or answer their questions, or answer our own questions... wink But I do get the possible security issue if a particular version might be exploitable...
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0, Google Chrome, & Safari 3.1 (XP and iPhone)

Top
#211871 - 05/12/08 10:34 AM Re: 7.3 - footer [Re: jgeoff]
Ian Moderator Offline

***

Registered: 06/05/06
Posts: 4160
Loc: Essex, UK
Disagree as it is the copyright! The software is written and released in the English language so should remain as such.

I think it is also part of the licence that this cannot be changed, so any putting of it into the language file would go against the licence that everyone agrees to.

I might be wrong - but I do not think so smile
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211876 - 05/12/08 11:05 AM Re: 7.3 - footer [Re: Ian]
driv Offline
Pooh-Bah
****

Registered: 01/10/04
Posts: 1703
Loc: Essex, UK
I'm inclined to agree about removing the version number - that's how phpBB hackers have found easy exploits over the years.

Yes I agree that it is the responsibility of the user to keep their boards up to date - but that's in a perfect world.

I wonder how many 7.2 users aren't aware that 7.3 has been released?
_________________________
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)
My True star rating wink

Top
#211878 - 05/12/08 11:17 AM Re: 7.3 - footer [Re: driv]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1885
Loc: NJ

If it's okay with Rick, the version number can be placed back into the link title (shown with mouseover, as in 7.1) by using the following in the footer template:

Code:
<a href="http://www.ubbcentral.com/" target="_blank" title="{$VERSION}">Powered by UBB.threads&trade;</a>


It's not, of course, foolproof, but it could help?
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0, Google Chrome, & Safari 3.1 (XP and iPhone)

Top
#211916 - 05/12/08 02:49 PM Re: 7.3 - footer [Re: jgeoff]
Thelockman Offline
addict
**

Registered: 02/10/07
Posts: 443
Loc: Pennsylvania
Here is another point. My ISP is "Powering" the site and the site is running UBB.threads so why can't it be "Powered by me running UBB.threads"?
_________________________
Beagle World - A forum for those who are owned by beagles.
Track Thunder - The Unofficial Racing Forum

Top
#211919 - 05/12/08 03:01 PM Re: 7.3 - footer [Re: Thelockman]
Ian Moderator Offline

***

Registered: 06/05/06
Posts: 4160
Loc: Essex, UK
because you do not own the software wink
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
Page 1 of 2 1 2 >


Shout Box

Today's Birthdays
kimteague_5@msn.com, Trekkie, Trixie
Recent Topics
Issue mass-emailing
by Mitch P.
Today at 12:55 PM
Inclusion of Locked/Closed thread capabilities
by QSS Tim
Today at 11:17 AM
Contact Page Problem
by David DelMonte
Today at 09:05 AM
FAQ bug,
by BreeOge
Today at 08:36 AM
I'm the Admin but.....
by David DelMonte
Yesterday at 11:12 AM
Forum Stats
4261 Members
33 Forums
30539 Topics
155016 Posts

Max Online: 978 @ 06/24/07 08:19 PM