Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
3 registered (Morgan, Rick, Ultimatelunker), 32 Guests and 20 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 08/30/06
Posts: 1256
Top Posters (30 Days)
Rick 110
Gizmo 99
Thelockman 56
driv 53
AllenAyres 40
Morgan 37
ntdoc 32
flyboy105 31
blaaskaak 29
ScriptKeeper 27
Latest Photos
XTERRA K9 Challenge
DEG Metro Stars: Jamie Storr
My new girlfriend
testing photo upload in ie7
Fall foilage in New England
Page 1 of 2 1 2 >
Topic Options
Rate This Topic
#211812 - 05/12/08 01:23 AM 7.3 - footer
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1070
Loc: Berlin, Germany
I have 2 litte suggestions for the footer.tpl
1) replace the hardcode powered by with wordlet
2) remove the version from footer. If a security bug found this made it not so easy to identify your running version
line 48:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">Powered by UBB.threads&trade; {$VERSION}</a>

change to:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">{$lang.POWERED_BY} UBB.threads&trade;</a>
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211814 - 05/12/08 01:45 AM Re: 7.3 - footer [Re: Zarzal]
Ian Moderator Offline


Registered: 06/05/06
Posts: 4122
Loc: Essex, UK
One of the problems for Rick and Groupee is the fact that people remove and alter the copyright against the agreement that everyone makes when they purchase the script.

I think by putting it into the language file will make it easier for people to change the wording, whereas at the moment users have to physically alter a file.

The only way this would perhaps work is if the language file was not directly editable from the CP.

There are two sides to also displaying the version. It makes it easy to see which version is being run. I am also not sure that it is a security risk as it is the site owners responsibility to upgrade to the latest version. If owners do not update their scripts, I am not sure that Groupee can be held responsible for versions that have reached their EOL. Groupee have a responsibility to ensure that the latest version (currently 7.3) is free of any security holes, but not versions that are 2 or 3 versions old.

I am only speaking from my own thoughts on the subject, and do not know what the company line is.
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211816 - 05/12/08 01:59 AM Re: 7.3 - footer [Re: Ian]
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1070
Loc: Berlin, Germany
the running version is shown in the admin section. This should be enough. Displaying the version public made it easy to find the propper boards using google. If you dont show the version you must try more board if you test a exploit.
Ok, its not a big thing.

Wordlet: As you see I only take the powered by. The rest is in the footer hardcode. The powered by string is also used for the browser top line while wathing the portal. This gives me the option in different languages to translate the powered by string without touching the UBBthreads™ and the link.
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211817 - 05/12/08 02:50 AM Re: 7.3 - footer [Re: Zarzal]
Gizmo Moderator Offline


Registered: 06/04/06
Posts: 11815
Loc: Portland, OR; USA
Whereas I'm against moving the powered by to a language file (agree with ian), I am for removing the version number for the security mention.
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#211867 - 05/12/08 10:12 AM Re: 7.3 - footer [Re: Gizmo]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1882
Loc: NJ

"Powered by" should be in the language file (agree with Zarzal lol) because in another language people might not understand what it means. Those two words have nothing to do with the copyright statement, but help them understand that it is a copyright.

I liked the old hover-over for the version number in 7.1, not sure if search engines would see it or not? It's good to know the version number another site is using if trying to debug or answer their questions, or answer our own questions... wink But I do get the possible security issue if a particular version might be exploitable...
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0, Google Chrome, & Safari 3.1 (XP and iPhone)

Top
#211871 - 05/12/08 10:34 AM Re: 7.3 - footer [Re: jgeoff]
Ian Moderator Offline


Registered: 06/05/06
Posts: 4122
Loc: Essex, UK
Disagree as it is the copyright! The software is written and released in the English language so should remain as such.

I think it is also part of the licence that this cannot be changed, so any putting of it into the language file would go against the licence that everyone agrees to.

I might be wrong - but I do not think so smile
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211876 - 05/12/08 11:05 AM Re: 7.3 - footer [Re: Ian]
driv Offline
Pooh-Bah

Registered: 01/10/04
Posts: 1625
Loc: Essex, UK
I'm inclined to agree about removing the version number - that's how phpBB hackers have found easy exploits over the years.

Yes I agree that it is the responsibility of the user to keep their boards up to date - but that's in a perfect world.

I wonder how many 7.2 users aren't aware that 7.3 has been released?
_________________________
I've gone Gold baby!
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)

Top
#211878 - 05/12/08 11:17 AM Re: 7.3 - footer [Re: driv]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1882
Loc: NJ

If it's okay with Rick, the version number can be placed back into the link title (shown with mouseover, as in 7.1) by using the following in the footer template:

Code:
<a href="http://www.ubbcentral.com/" target="_blank" title="{$VERSION}">Powered by UBB.threads&trade;</a>


It's not, of course, foolproof, but it could help?
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0, Google Chrome, & Safari 3.1 (XP and iPhone)

Top
#211916 - 05/12/08 02:49 PM Re: 7.3 - footer [Re: jgeoff]
Thelockman Offline
enthusiast

Registered: 02/10/07
Posts: 325
Loc: Pennsylvania
Here is another point. My ISP is "Powering" the site and the site is running UBB.threads so why can't it be "Powered by me running UBB.threads"?
_________________________
Beagle World - A forum for those who are owned by beagles.
Track Thunder - The Unofficial Racing Forum

Top
#211919 - 05/12/08 03:01 PM Re: 7.3 - footer [Re: Thelockman]
Ian Moderator Offline


Registered: 06/05/06
Posts: 4122
Loc: Essex, UK
because you do not own the software wink
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
Page 1 of 2 1 2 >


Shout Box

Today's Birthdays
The Spin Master
Recent Topics
Subject line and Watched topics in Quick Reply form?
by medencev
Today at 06:35 AM
Moderators can't read despite the moderators settings are ok
by Morgan
Today at 03:14 AM
login and no permission issue
by Morgan
Today at 02:58 AM
Looking for Russian v7.3.1
by medencev
Today at 12:52 AM
Global Moderator problem
by Darryl
Yesterday at 10:04 PM
Forum Stats
4093 Members
33 Forums
30216 Topics
152996 Posts

Max Online: 978 @ 06/24/07 08:19 PM