الإصدار MyBB 1.4.2 تحديث امنى

[Pepo]

قم بتعطيلها وإعادة تفعيلها.
اذا مازالت المشكلة موجودة برجاء مناقشتها بداخل موضوع الهاك.

[انسان]

محتوى ملف htaccess اللذى بداجل مجلد المنتدى هو :

كود :

##
# @version $Id: htaccess.txt 10492 2008-07-02 06:38:28Z ircmaxell $
# @package Joomla
# @copyright Copyright (C) 2005 - 2008 Open Source Matters. All rights reserved.
# @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
# Joomla! is Free Software
##


#####################################################
#  READ THIS COMPLETELY IF YOU CHOOSE TO USE THIS FILE
#
# The line just below this section: 'Options +FollowSymLinks' may cause problems
# with some server configurations.  It is required for use of mod_rewrite, but may already
# be set by your server administrator in a way that dissallows changing it in
# your .htaccess file.  If using it causes your server to error out, comment it out (add # to
# beginning of line), reload your site in your browser and test your sef url's.  If they work,
# it has been set by your server administrator and you do not need it set here.
#
#####################################################

##  Can be commented out if causes errors, see notes above.
Options +FollowSymLinks

#
#  mod_rewrite in use

RewriteEngine On

########## Begin - Rewrite rules to block out some common exploits
## If you experience problems on your site block out the operations listed below
## This attempts to block the most common type of exploit `attempts` to Joomla!
#
# Block out any script trying to set a mosConfig value through the URL
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]
# Block out any script trying to base64_encode crap to send via URL
RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]
# Block out any script that includes a <script> tag in URL
RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]
# Block out any script trying to set a PHP GLOBALS variable via URL
RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]
# Block out any script trying to modify a _REQUEST variable via URL
RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})
# Send all blocked request to homepage with 403 Forbidden error!
RewriteRule ^(.*)$ index.php [F,L]
#
########## End - Rewrite rules to block out some common exploits

#  Uncomment following line if your webserver's URL
#  is not directly related to physical file paths.
#  Update Your Joomla! Directory (just / for root)

# RewriteBase /


########## Begin - Joomla! core SEF Section
#
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !^/index.php
RewriteCond %{REQUEST_URI} (/|\.php|\.html|\.htm|\.feed|\.pdf|\.raw|/[^.]*)$  [NC]
RewriteRule (.*) index.php
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
#
########## End - Joomla! core SEF Section

[Pepo]

هذا ليس ملف .htaccess الخاص بالمنتدى. هذا ملف خاص بمجلة جملة وليس المنتدى

[انسان]

اه اسف والله يا اخى عينى خانتنى

الملف اهو

كود :

Options -MultiViews +FollowSymlinks -Indexes



#

# If mod_security is enabled, attempt to disable it.

# - Note, this will work on the majority of hosts but on

#   MediaTemple, it is known to cause random Internal Server

#   errors. For MediaTemple, please remove the block below

#

<IfModule mod_security.c>

    # Turn off mod_security filtering.

    SecFilterEngine Off



    # The below probably isn't needed, but better safe than sorry.

    SecFilterScanPOST Off

</IfModule>



#

# MyBB "search engine friendly" URL rewrites

# - Note, for these to work with MyBB please make sure you have

#   the setting enabled in the Admin CP and you have this file

#   named .htaccess

#

<IfModule mod_rewrite.c>

    RewriteEngine on

    RewriteRule ^forum-([0-9]+).html forumdisplay.php?fid=$1 [L,QSA]

    RewriteRule ^forum-([0-9]+)-page-([0-9]+).html forumdisplay.php?fid=$1&page=$2 [L,QSA]



    RewriteRule ^thread-([0-9]+).html showthread.php?tid=$1 [L,QSA]

    RewriteRule ^thread-([0-9]+)-page-([0-9]+).html showthread.php?tid=$1&page=$2 [L,QSA]

    RewriteRule ^thread-([0-9]+)-lastpost.html showthread.php?tid=$1&action=lastpost [L,QSA]

    RewriteRule ^thread-([0-9]+)-nextnewest.html showthread.php?tid=$1&action=nextnewest [L,QSA]

    RewriteRule ^thread-([0-9]+)-nextoldest.html showthread.php?tid=$1&action=nextoldest [L,QSA]

    RewriteRule ^thread-([0-9]+)-newpost.html showthread.php?tid=$1&action=newpost [L,QSA]

    RewriteRule ^thread-([0-9]+)-post-([0-9]+).html showthread.php?tid=$1&pid=$2 [L,QSA]



    RewriteRule ^post-([0-9]+).html showthread.php?pid=$1 [L,QSA]



    RewriteRule ^announcement-([0-9]+).html announcements.php?aid=$1 [L,QSA]



    RewriteRule ^user-([0-9]+).html member.php?action=profile&uid=$1 [L,QSA]



    RewriteRule ^calendar-([0-9]+).html calendar.php?calendar=$1 [L,QSA]

    RewriteRule ^calendar-([0-9]+)-year-([0-9]+).html calendar.php?action=yearview&calendar=$1&year=$2 [L,QSA]

    RewriteRule ^calendar-([0-9]+)-year-([0-9]+)-month-([0-9]+).html calendar.php?calendar=$1&year=$2&month=$3 [L,QSA]

    RewriteRule ^calendar-([0-9]+)-year-([0-9]+)-month-([0-9]+)-day-([0-9]+).html calendar.php?action=dayview&calendar=$1&year=$2&month=$3&day=$4 [L,QSA]

    RewriteRule ^calendar-([0-9]+)-week-([0-9]+).html calendar.php?action=weekview&calendar=$1&week=$2 [L,QSA]



    RewriteRule ^event-([0-9]+).html calendar.php?action=event&eid=$1 [L,QSA]



    <IfModule mod_env.c>

        SetEnv SEO_SUPPORT 1

    </IfModule>

</IfModule>



#

# If Apache is compiled with built in mod_deflade/GZIP support

# then GZIP Javascript, CSS, HTML and XML so they're sent to

# the client faster.

#

<IfModule mod_deflate.c>

    AddOutputFilterByType DEFLATE application/x-javascript text/css text/html text/xml

</IfModule>

[Pepo]

اذا استضافتك ببساطة لا تدعم الـ mod_rewrite
قم بتغيير اسم الملف لأى شئ اخر. واستخدم الروابط العادية..

[jramsahla]

اخوتي الكرام، اني اواجه نفس المشكلة اللتي يواجهها الجميع بعد التديث وهي التكرار في لوحة الإدارة هل من حل لهذه المشكلة

---

باتش لإزالة التكرار في صفحة الإدارة

Attached is a simple method to fix double settings.

Instructions:

Upload the file to your root mybb folder.
/root/double_delete.php

Then access the file via your browser.
http://www.domain.com/mybb/double_delete.php


This will copy only your unique settings to a new table, delete your old settings, then rename the copy back to original. It's dirty fix but it works and it's fast method.


هذا رابط الملف اضغط هنا يرجى رفعه الى المنتدى والدخول ليه بحسب رابط منتداك

http://www.domain.com/mybb/double_delete.php

منقول من موقع MYBB

[Pepo]

شكرا لك اخى الكريم على ايجادك للباتش..

[Dr.Desmond]

شكرا لك jramsahla على الباتش...
لكن ماذا يقصد بانها:

This will copy only your unique settings to a new table, delete your old settings, then rename the copy back to original. It's dirty fix but it works and it's fast method.

مالذي يقصد بانها dirty fix

و شكرا...

[Pepo]

المقصود منها انه ليس حل عملى واحترافى. لكنه يعمل بكل الأحوال

[jramsahla]

شكراً Pepo على التوضيح