Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
5 registered (harder, Jake, Mark S, Ruben Rocha, Sirdude), 25 Guests and 15 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 03/13/07
Posts: 30
Top Posters (30 Days)
Ruben Rocha 105
Rick 80
Mark S 72
Thelockman 58
Gizmo 54
Sirdude 35
driv 35
ntdoc 32
packlite 24
AllenAyres 22
Latest Photos
bear test
Beach Barbie-Q
Sunset
Accept the challenge!
Trees
Page 1 of 2 1 2 >
Topic Options
Rate This Topic
#211812 - 05/12/08 01:23 AM 7.3 - footer
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1097
Loc: Berlin, Germany
I have 2 litte suggestions for the footer.tpl
1) replace the hardcode powered by with wordlet
2) remove the version from footer. If a security bug found this made it not so easy to identify your running version
line 48:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">Powered by UBB.threads&trade; {$VERSION}</a>

change to:
Code:
<a href="http://www.ubbcentral.com/" target="_blank">{$lang.POWERED_BY} UBB.threads&trade;</a>
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211814 - 05/12/08 01:45 AM Re: 7.3 - footer [Re: Zarzal]
Ian Moderator Offline

***

Registered: 06/05/06
Posts: 4176
Loc: Essex, UK
One of the problems for Rick and Groupee is the fact that people remove and alter the copyright against the agreement that everyone makes when they purchase the script.

I think by putting it into the language file will make it easier for people to change the wording, whereas at the moment users have to physically alter a file.

The only way this would perhaps work is if the language file was not directly editable from the CP.

There are two sides to also displaying the version. It makes it easy to see which version is being run. I am also not sure that it is a security risk as it is the site owners responsibility to upgrade to the latest version. If owners do not update their scripts, I am not sure that Groupee can be held responsible for versions that have reached their EOL. Groupee have a responsibility to ensure that the latest version (currently 7.3) is free of any security holes, but not versions that are 2 or 3 versions old.

I am only speaking from my own thoughts on the subject, and do not know what the company line is.
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211816 - 05/12/08 01:59 AM Re: 7.3 - footer [Re: Ian]
Zarzal Offline
old hand

Registered: 06/05/06
Posts: 1097
Loc: Berlin, Germany
the running version is shown in the admin section. This should be enough. Displaying the version public made it easy to find the propper boards using google. If you dont show the version you must try more board if you test a exploit.
Ok, its not a big thing.

Wordlet: As you see I only take the powered by. The rest is in the footer hardcode. The powered by string is also used for the browser top line while wathing the portal. This gives me the option in different languages to translate the powered by string without touching the UBBthreads™ and the link.
_________________________
my board: http://www.dragon-clan.de
my hobby: http://www.biker-reise.de
Ich kann bei Fragen zu UBBthreads in Deutsch weiterhelfen oder es zumindest versuchen

Top
#211817 - 05/12/08 02:50 AM Re: 7.3 - footer [Re: Zarzal]
Gizmo Moderator Offline

***

Registered: 06/04/06
Posts: 12089
Loc: Portland, OR; USA
Whereas I'm against moving the powered by to a language file (agree with ian), I am for removing the version number for the security mention.
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#211867 - 05/12/08 10:12 AM Re: 7.3 - footer [Re: Gizmo]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1901
Loc: NJ

"Powered by" should be in the language file (agree with Zarzal lol) because in another language people might not understand what it means. Those two words have nothing to do with the copyright statement, but help them understand that it is a copyright.

I liked the old hover-over for the version number in 7.1, not sure if search engines would see it or not? It's good to know the version number another site is using if trying to debug or answer their questions, or answer our own questions... wink But I do get the possible security issue if a particular version might be exploitable...
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0, Google Chrome, & Safari 3.1 (XP and iPhone)

Top
#211871 - 05/12/08 10:34 AM Re: 7.3 - footer [Re: jgeoff]
Ian Moderator Offline

***

Registered: 06/05/06
Posts: 4176
Loc: Essex, UK
Disagree as it is the copyright! The software is written and released in the English language so should remain as such.

I think it is also part of the licence that this cannot be changed, so any putting of it into the language file would go against the licence that everyone agrees to.

I might be wrong - but I do not think so smile
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
#211876 - 05/12/08 11:05 AM Re: 7.3 - footer [Re: Ian]
driv Online   happy
Pooh-Bah
****

Registered: 01/10/04
Posts: 1747
Loc: Essex, UK
I'm inclined to agree about removing the version number - that's how phpBB hackers have found easy exploits over the years.

Yes I agree that it is the responsibility of the user to keep their boards up to date - but that's in a perfect world.

I wonder how many 7.2 users aren't aware that 7.3 has been released?
_________________________
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)
My True star rating wink

Top
#211878 - 05/12/08 11:17 AM Re: 7.3 - footer [Re: driv]
jgeoff Offline
Pooh-Bah

Registered: 08/08/06
Posts: 1901
Loc: NJ

If it's okay with Rick, the version number can be placed back into the link title (shown with mouseover, as in 7.1) by using the following in the footer template:

Code:
<a href="http://www.ubbcentral.com/" target="_blank" title="{$VERSION}">Powered by UBB.threads&trade;</a>


It's not, of course, foolproof, but it could help?
_________________________
GangsterBB.NET (Ver. 7.3)
2007 Content Rulez Contest - Hon Mention
UBB.classic 6.7.2 - RIP
Browsers: Firefox 3.0, Google Chrome, & Safari 3.1 (XP and iPhone)

Top
#211916 - 05/12/08 02:49 PM Re: 7.3 - footer [Re: jgeoff]
Thelockman Offline
addict
***

Registered: 02/10/07
Posts: 522
Loc: Pennsylvania
Here is another point. My ISP is "Powering" the site and the site is running UBB.threads so why can't it be "Powered by me running UBB.threads"?
_________________________
Beagle World - A forum for those who are owned by beagles.
Track Thunder - The Unofficial Racing Forum

Top
#211919 - 05/12/08 03:01 PM Re: 7.3 - footer [Re: Thelockman]
Ian Moderator Offline

***

Registered: 06/05/06
Posts: 4176
Loc: Essex, UK
because you do not own the software wink
_________________________
Fans Focus - Focusing on Fans of Sport

(Okay - mainly football (the British variety wink at the moment - but expanding all the time....))

Top
Page 1 of 2 1 2 >


Shout Box

Today's Birthdays
GOTMYSELFA...., smilinjack
Recent Topics
New members don't get access and are not displayed in the config panel
by Yomar
Today at 03:32 AM
How to Change Link Color / Underline in styles?
by ECNet
Yesterday at 10:00 PM
Chaging the "max online" number and date
by wanted
Yesterday at 02:22 PM
7.4.1. In Threaded Mode - "Mark All Read" Doesn't Work
by packlite
Yesterday at 10:26 AM
Custom island with sql connection
by Robje01
Yesterday at 09:13 AM
Forum Stats
4296 Members
33 Forums
30687 Topics
156012 Posts

Max Online: 978 @ 06/24/07 08:19 PM