Welcome Guest Search | Active Topics | Log In | Register

2 Pages <12
** YAF v1.0.1 is Released! ** Options · View
wtilton
#16 Posted : Wednesday, March 15, 2006 1:29:03 AM

Rank: YAF Developer


Joined: 4/27/2005
Posts: 314
Location: Huntington Beach, CA
deerchao wrote:
Yeah, so nice to hear this.
One question, can this version run under .net 2.0?


Not this version, look at the 2.0 version 1.9.1.
wtilton
#17 Posted : Wednesday, March 15, 2006 1:30:04 AM

Rank: YAF Developer


Joined: 4/27/2005
Posts: 314
Location: Huntington Beach, CA
WillemV wrote:


Version Information: Microsoft .NET Framework Version:2.0.50727.42; ASP.NET Version:2.0.50727.42


Version 2.0 isn't the same as 1.1. 1.0.1 does not support 2.0 only 1.1. Download and try the 1.9.1 version for ASP.NET 2.0.
Devang
#18 Posted : Saturday, March 18, 2006 7:16:17 AM

Rank: YAF Forumling




Joined: 3/1/2006
Posts: 5
Location: India
Hello!

Some problems again Smile

After install:
Try to first login (with "Windows" authentication)

and get this error:
Aivar wrote:

Cannot insert the value NULL into column 'RankID', table 'ForumNET.dbo.yaf_User'; column does not allow nulls. INSERT fails. The statement has been terminated.


(in DB.user_register())

I have not found error cause yet

wtilton
#19 Posted : Tuesday, March 21, 2006 7:27:25 PM

Rank: YAF Developer


Joined: 4/27/2005
Posts: 314
Location: Huntington Beach, CA
Devang wrote:
Hello!

Some problems again Smile

After install:
Try to first login (with "Windows" authentication)

and get this error:
Aivar wrote:

Cannot insert the value NULL into column 'RankID', table 'ForumNET.dbo.yaf_User'; column does not allow nulls. INSERT fails. The statement has been terminated.


(in DB.user_register())

I have not found error cause yet



YAF uses Forms authentication, not Windows.
Institoris
#20 Posted : Saturday, April 01, 2006 9:34:35 PM

Rank: YAF Camper



Joined: 2/21/2006
Posts: 13
Location: USSR, Moscow
Exclamation
And what about new DNN module?
0.9.9 is out of date!
Exclamation
Deus To Vult!
KevinTen
#21 Posted : Tuesday, April 18, 2006 2:09:28 PM

Rank: YAF Forumling


Joined: 4/18/2006
Posts: 4
Location: taiwan
Hi Jaben,

i used the old version, i don't know the version, maybe 0.98, it include the richedit.js.

my question is:

if i upgrade to 1.01, do i need change my database schema? i change the database to sql server.

Thanks.

Kevin
TommyB
#22 Posted : Monday, May 01, 2006 12:08:04 PM

Rank: YAF Commander



Joined: 7/6/2005
Posts: 92
Location: Germany
@Dev: Thanks for your hard work and the best asp.net-forum out (I think)

But one small addition: It would be better if you can resize the background images to a larger format (eg 128 instread 1px width) It will cost much cpu usage on some browsers, if they have to tile the images so often, and its no problem to fix this. I've done it and works much better for me Wink
- Sry for my english Wink

BattCursor.Net - Official homepage of that tool for vista laptops!
deerchao
#23 Posted : Tuesday, May 02, 2006 2:35:04 AM

Rank: YAF Lover



Joined: 11/24/2005
Posts: 63
Location: BeiJing China
KevinTen wrote:
Hi Jaben,

i used the old version, i don't know the version, maybe 0.98, it include the richedit.js.

my question is:

if i upgrade to 1.01, do i need change my database schema? i change the database to sql server.

Thanks.

Kevin


Update will auto change the schema, so backup your db before updating.
Unibetter大学生社区
Drag Reducing Agents

Mesages may be with gramar or speling mistakes, but I think you wil understand me :D
xfz
#24 Posted : Tuesday, May 30, 2006 8:19:24 AM

Rank: YAF Forumling


Joined: 5/21/2006
Posts: 3
Location: Lund, Sweden
How about the security issues in YAF 1.0.1?

We were trying to install it on our server but it dit complain about security breaches with the cross scripting (users can access the other users cookies).

Are there any problems or could we trust it?
Neven
#25 Posted : Tuesday, May 30, 2006 9:55:10 AM

Rank: YAF MVP



Joined: 11/26/2004
Posts: 509
Location: Zagreb, Croatia
xfz wrote:
How about the security issues in YAF 1.0.1?

We were trying to install it on our server but it dit complain about security breaches with the cross scripting (users can access the other users cookies).

Are there any problems or could we trust it?
Can you tell us how did you access other users' cookies?
Was the cookie usefull? I was enable to abuse even my own cookie at localhost....
... But trust me on the sunscreen!

test2005 wrote:
There not bugs(in YAF)...it's either un-defined features or exceptions to expected behavior!!
xfz
#26 Posted : Tuesday, May 30, 2006 10:06:49 AM

Rank: YAF Forumling


Joined: 5/21/2006
Posts: 3
Location: Lund, Sweden
Neven wrote:
xfz wrote:
How about the security issues in YAF 1.0.1?

We were trying to install it on our server but it dit complain about security breaches with the cross scripting (users can access the other users cookies).

Are there any problems or could we trust it?
Can you tell us how did you access other users' cookies?
Was the cookie usefull? I was enable to abuse even my own cookie at localhost....


I haven't.
I search on the internet for security problems and found out that you can do this.
xfz
#27 Posted : Tuesday, May 30, 2006 10:07:55 AM

Rank: YAF Forumling


Joined: 5/21/2006
Posts: 3
Location: Lund, Sweden
xfz wrote:
Neven wrote:
xfz wrote:
How about the security issues in YAF 1.0.1?

We were trying to install it on our server but it dit complain about security breaches with the cross scripting (users can access the other users cookies).

Are there any problems or could we trust it?
Can you tell us how did you access other users' cookies?
Was the cookie usefull? I was enable to abuse even my own cookie at localhost....


I haven't.
I search on the internet for security problems and found out that you can do this.


http://securitytracker.com/alerts/2005/Apr/1013632.html
Neven
#28 Posted : Tuesday, May 30, 2006 12:02:43 PM

Rank: YAF MVP



Joined: 11/26/2004
Posts: 509
Location: Zagreb, Croatia
xfz wrote:
http://securitytracker.com/alerts/2005/Apr/1013632.html
securitytracker.com wrote:
Version(s): 0.9.9
Yaf is now in 1.0.2., and AFIK the user input is now being validated.
I think that the problem still exists in the admin section (see this)
... But trust me on the sunscreen!

test2005 wrote:
There not bugs(in YAF)...it's either un-defined features or exceptions to expected behavior!!
Users browsing this topic
Guest
2 Pages <12
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

YAFPro Theme Created by Jaben Cargman (Tiny Gecko)
Powered by YAF 1.9.3 RC2 | YAF © 2003-2008, Yet Another Forum.NET
This page was generated in 0.136 seconds.

SourceForge.net Logo Powered by ASP.NET v2.0 411ASP.NET