Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
3 Registered (FordDoctor, Island Piper, Sirdude), 25 Guests and 27 Spiders online.
Key: Admin, Global Mod, Mod
Top Posters
Gizmo 11622
Rick 7458
Ian 4090
Mark S 3960
ntdoc 3089
Sirdude 1953
jgeoff 1876
David Dreezer 1740
driv 1504
AllenAyres 1487
Latest Photos
Sunflower Photo
Testing
Test Photo
4TH of July at the river!
Sunflower Photo
Page 1 of 2 1 2 >
Topic Options
Rate This Topic
#211812 - 05/12/08 01:23 AM 7.3 - footer
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1041
Loc: Berlin, Germany
I have 2 litte suggestions for the footer.tpl
1) replace the hardcode powered by with wordlet
2) remove the version from footer. If a security bug found this made it not so easy to identify your running version
line 48:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">Powered by UBB.threads&trade; {$VERSION}</a>

change to:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">{$lang.POWERED_BY} UBB.threads&trade;</a>
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211814 - 05/12/08 01:45 AM Re: 7.3 - footer [Re: Zarzal]
Ian Moderator Offline


Registered: 06/05/06
Posts: 4090
Loc: Essex, UK
One of the problems for Rick and Groupee is the fact that people remove and alter the copyright against the agreement that everyone makes when they purchase the script.

I think by putting it into the language file will make it easier for people to change the wording, whereas at the moment users have to physically alter a file.

The only way this would perhaps work is if the language file was not directly editable from the CP.

There are two sides to also displaying the version. It makes it easy to see which version is being run. I am also not sure that it is a security risk as it is the site owners responsibility to upgrade to the latest version. If owners do not update their scripts, I am not sure that Groupee can be held responsible for versions that have reached their EOL. Groupee have a responsibility to ensure that the latest version (currently 7.3) is free of any security holes, but not versions that are 2 or 3 versions old.

I am only speaking from my own thoughts on the subject, and do not know what the company line is.
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211816 - 05/12/08 01:59 AM Re: 7.3 - footer [Re: Ian]
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1041
Loc: Berlin, Germany
the running version is shown in the admin section. This should be enough. Displaying the version public made it easy to find the propper boards using google. If you dont show the version you must try more board if you test a exploit.
Ok, its not a big thing.

Wordlet: As you see I only take the powered by. The rest is in the footer hardcode. The powered by string is also used for the browser top line while wathing the portal. This gives me the option in different languages to translate the powered by string without touching the UBBthreads™ and the link.
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211817 - 05/12/08 02:50 AM Re: 7.3 - footer [Re: Zarzal]
Gizmo Moderator Offline


Registered: 06/04/06
Posts: 11622
Loc: Portland, OR; USA
Whereas I'm against moving the powered by to a language file (agree with ian), I am for removing the version number for the security mention.
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#211867 - 05/12/08 10:12 AM Re: 7.3 - footer [Re: Gizmo]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1876
Loc: NJ

"Powered by" should be in the language file (agree with Zarzal lol) because in another language people might not understand what it means. Those two words have nothing to do with the copyright statement, but help them understand that it is a copyright.

I liked the old hover-over for the version number in 7.1, not sure if search engines would see it or not? It's good to know the version number another site is using if trying to debug or answer their questions, or answer our own questions... wink But I do get the possible security issue if a particular version might be exploitable...
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0 & Safari 3.1 (XP and iPhone)

Top
#211871 - 05/12/08 10:34 AM Re: 7.3 - footer [Re: jgeoff]
Ian Moderator Offline


Registered: 06/05/06
Posts: 4090
Loc: Essex, UK
Disagree as it is the copyright! The software is written and released in the English language so should remain as such.

I think it is also part of the licence that this cannot be changed, so any putting of it into the language file would go against the licence that everyone agrees to.

I might be wrong - but I do not think so smile
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211876 - 05/12/08 11:05 AM Re: 7.3 - footer [Re: Ian]
driv Offline
veteran

Registered: 01/10/04
Posts: 1504
Loc: Essex, UK
I'm inclined to agree about removing the version number - that's how phpBB hackers have found easy exploits over the years.

Yes I agree that it is the responsibility of the user to keep their boards up to date - but that's in a perfect world.

I wonder how many 7.2 users aren't aware that 7.3 has been released?
_________________________
I've gone Gold baby!
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)

Top
#211878 - 05/12/08 11:17 AM Re: 7.3 - footer [Re: driv]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1876
Loc: NJ

If it's okay with Rick, the version number can be placed back into the link title (shown with mouseover, as in 7.1) by using the following in the footer template:

Code:
<a href="http://www.ubbcentral.com/" target="_blank" title="{$VERSION}">Powered by UBB.threads&trade;</a>


It's not, of course, foolproof, but it could help?
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0 & Safari 3.1 (XP and iPhone)

Top
#211916 - 05/12/08 02:49 PM Re: 7.3 - footer [Re: jgeoff]
Thelockman Offline
enthusiast

Registered: 02/10/07
Posts: 221
Loc: Pennsylvania
Here is another point. My ISP is "Powering" the site and the site is running UBB.threads so why can't it be "Powered by me running UBB.threads"?
_________________________
Beagle World a place for those who are owned by beagles.

Top
#211919 - 05/12/08 03:01 PM Re: 7.3 - footer [Re: Thelockman]
Ian Moderator Offline


Registered: 06/05/06
Posts: 4090
Loc: Essex, UK
because you do not own the software wink
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
Page 1 of 2 1 2 >


Shout Box

Recent Topics
SQL Error 2013
by Lori.j
Today at 12:37 PM
Font color help, please!
by MLD
Today at 08:27 AM
How do I have a daily random quote appear at the top or in one of the side bars?
by JPFolks
Today at 07:40 AM
How can I have a video box in the sidebar that has a welcome/info video?
by JPFolks
Today at 07:38 AM
[7.2.2] Deleted users Display Name stills shows
by Kefas
Yesterday at 06:27 PM
Forum Stats
3986 Members
33 Forums
30702 Topics
155827 Posts

Max Online: 978 @ 06/24/07 08:19 PM