YaBB SE Community

YaBB SE Info => News From the YaBB SE Team => Topic started by: Jeff Lewis on March 01, 2002, 07:57:10 PM

Title: Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 07:57:10 PM
There was recently a bug found in PHP which opens up a bit of a security hole.

Because of this, many hosts are disabling file uploads and the multipart post method.

A quick fix for this until we find a way around or your host upgrades to a good version is to do the following:

Ok...

Easiest way for now is to find this file in Post.php:

Code: [Select]
<form action="$cgi;action=post2" method="POST" name="postmodify" onSubmit="submitonce(this);" enctype="multipart/form-data">

and change it to:

Code: [Select]
<form action="$cgi;action=post2" method="POST" name="postmodify" onSubmit="submitonce(this);">

Find this in ModifyMessage.php

Code: [Select]
<form action="$cgi;action=modify2;start=$start" method=post name="postmodify" onSubmit="submitonce(this);" enctype="multipart/form-data">

and change it to:

Code: [Select]
<form action="$cgi;action=modify2;start=$start" method=post name="postmodify" onSubmit="submitonce(this);">

Disable attachments for now and I will work on a fix for this...
Title: Re:Problem with posting a message (subject empty error)!
Post by: Shaun on March 01, 2002, 08:04:37 PM
WOOOHOOO!!!


Thank You Jeff!
Title: Re:Problem with posting a message (subject empty error)!
Post by: Daniel D. on March 01, 2002, 08:04:46 PM
The worlds fastest "Know-a-bug-post-a-solution-and-work-for-a-fix" - Admin ! ;)

Thx.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Shoeb Omar on March 01, 2002, 08:06:34 PM
hehe - so what happens if we do what ya just said and leave ifle attachments on?...
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 08:09:16 PM
Yeah sorry, I worked until 4 and then went to see my travel agent ;)  So sorry for the delay...

As for leaving it on...it will annoy the hell out of your users I'm sure :)  May cause an error too, just follow the damn instructions Omario ;)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Dave Smulders on March 01, 2002, 08:14:43 PM
Eh...disabling file-uploads?

That'll kill the database backup restoring for safe mode  >:(

...I'm having a bad *BAD* day.  :)

Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 08:17:03 PM
Hehe well one good thing!  It will force some hosts to FINALLY upgrade their versions of PHP ;)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Kevin on March 01, 2002, 08:26:17 PM
Whew! that fixed it!

Thanks, Jeff!
Title: Re:Problem with posting a message (subject empty error)!
Post by: blacknight on March 01, 2002, 08:26:53 PM
That seems to have fixed it!!
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 08:32:26 PM
You guys may want to ask your hosts when they plan on upgrading their PHP.  if they don't, they will have file uploads disabled for sometime...
Title: Re:Problem with posting a message (subject empty error)!
Post by: ChicagoEFI on March 01, 2002, 08:34:24 PM
Did you ever know that your my Hero? Did you ever know that you are the wind beneath my wings!!! ;D
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 08:39:12 PM
Oh geez ;)
Title: Re:Problem with posting a message (subject empty error)!
Post by: PabUK on March 01, 2002, 08:50:06 PM
Hey leave Jeff alone - he's mine. ;)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 08:55:33 PM
Guys, Kevin Mara also pointed out the ModifyMessage.php gets this problem as well so I posted the code to change in my first post in this thread...

Thanks Kevin!
Title: Re:Problem with posting a message (subject empty error)!
Post by: Iago on March 01, 2002, 09:15:23 PM
Thanks for the prompt fix. and for fixing the first problem for us via ftp. *erects pyramid-sized Jeff altar*
Title: Re:Problem with posting a message (subject empty error)!
Post by: Dataforce on March 01, 2002, 09:18:16 PM
LOL.

I dont use attchments, and Its Admin only ATM neway
Title: Re:Problem with posting a message (subject empty error)!
Post by: Shoeb Omar on March 01, 2002, 09:59:37 PM
how bout instanmssage.php?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 10:04:52 PM
Don't know, when's the last time you posted an attachment to an IM? ;)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Shoeb Omar on March 01, 2002, 10:07:05 PM
dunno - but it would be cool :D :P
Title: Re:Problem with posting a message (subject empty error)!
Post by: groundup on March 01, 2002, 10:26:42 PM
lol... i posted this in the old boards and it never got any attention  ::)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 01, 2002, 10:27:26 PM
Because, use email :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: groundup on March 01, 2002, 10:30:12 PM
i dont know how ;)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Dave Smulders on March 02, 2002, 02:26:43 PM
Then use icq file transfer :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Omar Bazavilvazo on March 02, 2002, 03:13:26 PM
or ftp, or yahoo briefcase, or any other way :d
Title: Re:Problem with posting a message (subject empty error)!
Post by: groundup on March 02, 2002, 04:44:40 PM
i was only kidding ya know

Title: Re:Problem with posting a message (subject empty error)!
Post by: Omar Bazavilvazo on March 02, 2002, 04:52:46 PM

i was only kidding ya know




Heh... thanks god :P
Title: Re:Problem with posting a message (subject empty error)!
Post by: Shoeb Omar on March 02, 2002, 09:20:27 PM
the only reliable file transfer: msn ;)

email is too slow :P
Title: Re:Problem with posting a message (subject empty error)!
Post by: groundup on March 02, 2002, 10:23:24 PM
what is wrong with AIM/ICQ/netmeeting/irc?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Omar Bazavilvazo on March 02, 2002, 10:27:52 PM

the only reliable file transfer: msn ;)

email is too slow :P


MSN reliable??? you kidding right?
I use MSN, YIM & ICQ, and the most reliable of the three is ICQ. :P
Title: Re:Problem with posting a message (subject empty error)!
Post by: ChicagoEFI on March 02, 2002, 11:03:30 PM
Hey jeff I am running into this problem when I try to edit a post. Is anybody else havin this trouble? ???
Title: Re:Problem with posting a message (subject empty error)!
Post by: Dave Smulders on March 02, 2002, 11:05:28 PM
Well....please specify the problem, and please do so in the help boards :)

Edit: Oops, I've misread your post....sorry for that comment, you are posting in the correct place :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 03, 2002, 12:04:31 AM
Did you also make the changes to ModifyMessage.php like I indicated?
Title: Re:Problem with posting a message (subject empty error)!
Post by: ChicagoEFI on March 03, 2002, 04:01:46 PM
Nope ::)

You have a link for me? :D
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 03, 2002, 04:04:39 PM
Heh, very first post in this thread :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: GerardoQ on March 03, 2002, 09:10:30 PM
I still have the problem when I preview a message and then try to post it.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Krip730 on March 05, 2002, 03:07:29 AM
thanx a million... all fixed.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 05, 2002, 07:25:32 AM
Anyone else still have the issue when previewing and then posting?
Title: Re:Problem with posting a message (subject empty error)!
Post by: groundup on March 05, 2002, 06:52:04 PM
i still cant even log in  :(
Title: Re:Problem with posting a message (subject empty error)!
Post by: merlin9524 on March 07, 2002, 11:36:49 AM
ACK!!!!

Well, I did the fix and it worked for a few days. Now it is doing exactly the same thing. Did my web host disable something again? What do I do? What do I do?  I am in great distress! My wife can't post! If it were ME, I would be fine, but this is my WIFE we are talking about here. Please help before the D word comes up!   ;D

Seriously though, I am having the same issue as before. Even after the fix. As I said, it WAS working and now it is FUBARed again.

Please assist.

Thanks,
  Merlin
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 07, 2002, 01:36:48 PM
Hehe, trying to avoid the bug D word.... ;)

Are you SURE someone didn't overwrite the files?  Like can you check to make sure that the fixed lines are there?
Title: Re:Problem with posting a message (subject empty error)!
Post by: merlin9524 on March 08, 2002, 12:03:21 PM
Yup, they are there. Went and verified it. Is there a way for them to disable the functions the fix bypassed? I dunno. PHP isnt one of my strongpoints. (one of many...)
Anyway, I have put in a trouble ticket with them, so maybe they can shed some light on the subject on their end.

Let me know if there is anything else I can do on my end.

Thanks again,
 Merlin
Title: Re:Problem with posting a message (subject empty error)!
Post by: benjyboy on March 08, 2002, 12:07:46 PM
Quote: "News: Please register again if needed, and tell us any weird thing you notice."

Didn't need to register again.........I've just caught site of my wife in the bathroom.  :o
Title: Re:Problem with posting a message (subject empty error)!
Post by: Shaun on March 08, 2002, 01:26:34 PM
I had to do "the fix" for a few days because my host disabled "file uploads".  I saw that through my phpinfo.php script.  I ran the phpinfo script yesterday and "file uploads" had a value of "1" instead of "no value" when I had the problem.  I took "the fix" off and enabled attachments again.  Everything is back to normal now!
Title: Re:Problem with posting a message (subject empty error)!
Post by: Coyote on March 08, 2002, 01:45:44 PM
I got this message 4 or 5 times this afternoon, while positing on this site.

Tony.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 08, 2002, 06:41:38 PM
Got what message?
Title: Re:Problem with posting a message (subject empty error)!
Post by: groundup on March 08, 2002, 10:07:21 PM
just sent email with ftp info
Title: Re:Problem with posting a message (subject empty error)!
Post by: Coyote on March 09, 2002, 04:59:36 AM
Hi Jeff,

Sorry I should have been a little clearer - it was a Subject Empty Error - even though it wasn't empty.

Hope that helps.
Tony.
Title: Re:Problem with posting a message (subject empty error)!
Post by: firewired on March 18, 2002, 09:42:46 AM
Hi Jeff,

We did the upgrade successfully and very quickly bumped into the subject empty error which we quickly resolved by applying your patches to the post and modifymessage files.

Unfortunately, we're still receiving a lot of complaints from users who can't preview their posts because of the same error.

Any quick fixes we can try?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 18, 2002, 10:38:37 AM
Um...do you have a URL I can take a look at?
Title: Re:Problem with posting a message (subject empty error)!
Post by: firewired on March 18, 2002, 02:05:09 PM
Um...do you have a URL I can take a look at?

Whoops! Sorry. The site is PinoyDVD.com (http://www.pinoydvd.com). The specific thread that mentions some of the problems that users are having is under Site Upgrade Issues (http://www.pinoydvd.com/yabbse/index.php?board=13;action=display;threadid=2869).

Thanks in advance for the help.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 18, 2002, 02:11:43 PM
In Post.php around like 347 I think, look for another form tag, this one is inside the preview function.  it looks like this:

Code: [Select]

<form action="$cgi;action=$destination" method="post" name="postmodify" onSubmit="submitonce(this);" enctype="multipart/form-data">


Change it to:

Code: [Select]

<form action="$cgi;action=$destination" method="post" name="postmodify" onSubmit="submitonce(this);">
   
Title: Re:Problem with posting a message (subject empty error)!
Post by: firewired on March 18, 2002, 02:56:45 PM
Thanks Jeff. Worked like a charm.
Title: Re:Problem with posting a message (subject empty error)!
Post by: groan on March 22, 2002, 11:51:57 AM
Crap!
just got this error on one of my boards and cant get to it to fix it! DAMN Firewalls!


WAAAA


jeeeffff?
do you still have my FTP info?

hehe.
just kidding,
i know your very busy so i wont ask you to fix it for me.

I figured this would have been adjusted in the 1.1.0 release...oh well
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on March 22, 2002, 11:56:57 AM
Did you apply these fixes?
Title: Re:Problem with posting a message (subject empty error)!
Post by: groan on March 22, 2002, 12:02:56 PM
not yet, as i said i cant access my site from where i am now...

no worries, ill get to it tonight.
Thanks for the fix BTW.
Title: Re:Problem with posting a message (subject empty error)!
Post by: AndyT on April 13, 2002, 03:04:57 AM
Does the 1.3 upgrade need this fix?


Thanks
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on April 13, 2002, 07:31:38 AM
It depends on what your host has done.  Most hosts have updated their installs or patched their current ones and 1.3 should be fine.  If you're on a sucky host and they haven't patched or upgraded, you'll need this yes.
Title: Re:Problem with posting a message (subject empty error)!
Post by: AndyT on April 13, 2002, 10:47:45 AM
Thankx
Title: Re:Problem with posting a message (subject empty error)!
Post by: bigfoot on April 16, 2002, 09:06:49 AM

There was recently a bug found in PHP which opens up a bit of a security hole.

Because of this, many hosts are disabling file uploads and the multipart post method.

A quick fix for this until we find a way around or your host upgrades to a good version is to do the following:


what ver of php does this bug effect?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on April 16, 2002, 09:07:50 AM
It affected many of them.  I believe 4.1 or 4.1.2 are fine.  Check the PHP site...
Title: Re:Problem with posting a message (subject empty error)!
Post by: gef on May 31, 2002, 05:49:53 PM
Well done : this bug made my lose my night :
21 PM to 00PM !!!

Good night and thanks for the patch
Title: Re:Problem with posting a message (subject empty error)!
Post by: Kit Master on June 03, 2002, 11:58:44 PM
This just appeared on my site today.  Damn it..  just as I was trying to post the very first message.  LOL

My site 2 weeks ago (before I killed it) messages worked fine..

Anyways, now that I got it online, and this bug appeared, I am going to upgrade to 1.4.  Is this problem fixed in 1.4, or will I have to make this mod after I upgrade.  

Should I do the fix first, then upgrade?  Should I just do a new install?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on June 04, 2002, 06:24:27 AM
Heh, it all depends on your host. If they have fixed the PHP install then it will be fine, if not, you'll need to make the file change again :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: babi-rhino on June 18, 2002, 04:59:43 AM
Forgive me for bringing this issue back from the dead, but I have a few issues puzzling me. Firstly, I recently installed 1.4.0 SE. For the first few days I had no probs, then a new user complained that he couldn't post. Why would this issue only affect one single user? Anyway, I've done the mod and now he's happy, but I'm not. Now I can't upload and this is quite a nice feature. My host is using PHP 4.06... should this version be upgraded?

Sorry for the questions...  :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on June 18, 2002, 06:33:16 AM
PHP released a few patches, maybe you could check and see if your host has applied them. Most hosts upgraded to new versions of PHP when this all happened.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Coyote on July 27, 2002, 07:01:02 PM
Hi Babi-Rhino,

I get still get the subject empty error on yabb.info's board when posting from work - So I have stopped posting from work :(

The reason for this is that we use websweeper, a content analysis system(that makes a 2mb connection look like a 28.8k connection!)

I am not sure why websweeper causes the problem, but another thing it does, is if I make a change in my Yabb Admin section - it wipes all of the fields blank! and I have to go through and put all my settings back.

It maybe the reason that you only had one user with the problem. Is/Was he posting through something like websweeper?

Just a thought.
Tony.
Title: Re:Problem with posting a message (subject empty error)!
Post by: babi-rhino on August 02, 2002, 10:40:48 AM


It maybe the reason that you only had one user with the problem. Is/Was he posting through something like websweeper?

Just a thought.
Tony.


Thanks Tony... appreciate you trying to shed some light on my issue.  :)
Title: Re:Problem with posting a message (subject empty error)!
Post by: rabidpenguin on August 09, 2002, 10:58:01 AM
This fixed this issue for the most part.  Now only get the no subject enterd error if post is previewed before posting.
Title: Re:Problem with posting a message (subject empty error)!
Post by: CotteN on August 24, 2002, 04:39:09 AM
Thank .....

But which PHP function(s) cost this happen ?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on August 24, 2002, 05:55:42 AM
It's allowing multi part forms that causes it to happen.
Title: Re:Problem with posting a message (subject empty error)!
Post by: vitou on September 18, 2002, 04:32:03 AM
I still have te same problem when I want to send a private message to a member.

Thanks for Help...
Title: Re:Problem with posting a message (subject empty error)!
Post by: MarcioRPC on October 02, 2002, 12:33:15 AM
From witch PHP version it works without the fix and we can make attachments?
There is another way to make attachments work, without upgrade the server's PHP version?
I have noticed another problem, after i make the changes i post.php and modifymessage.php, when we try to view the message before post, and then press 'Post', the same subject error occurs.
Tks for ur time.
Title: Re:Problem with posting a message (subject empty error)!
Post by: putergeek19 on October 17, 2002, 03:57:17 PM
I tryed it, and it didn't work for me.  Can anyone help me.   :'(
http://php4me.coolfreepage.com/yabbse/index.php
Title: Re:Problem with posting a message (subject empty error)!
Post by: CarLBanks on December 17, 2002, 11:25:44 AM
So is the error fixed?
Title: Re:Problem with posting a message (subject empty error)!
Post by: Jeff Lewis on December 17, 2002, 11:33:55 AM
If your host has updated properly then yes the issue is resolved. The hole sat in the lap of hosts who needed to upgrade or patch their PHP install.
Title: Re:Problem with posting a message (subject empty error)!
Post by: Marli on January 14, 2003, 10:24:00 PM
when you preview an IM you get the same error, what file needs changing to fix this?

sending IM is file
Title: Re:Problem with posting a message (subject empty error)!
Post by: Webby on January 28, 2003, 03:38:24 AM
Should I or shouldn't I post it here.....?  If not : don't shoot me  :-X

I upgraded last night to v1.5.1Rc38, and everything went fine.

I sent some IM's and stuff, but now (suddenly) I am the only one who can't send an IM to any of my members.

I get :

Code: [Select]
You have an error in your SQL syntax near '56,'marco@salesplaza.nl','thefalcon',1043742742,'here comes the subject)','and h' at line 3
: /home/sites/salesplaza.nl/www/forum/Sources/InstantMessage.php
: 797

I didn't change anything to that InstantMessage.php but it looks like there is a ( missing.

What could be wrong here, is it a bug, or is it something I did ???


[edit]

Found the problem when I wanted to view my Profile : it used my e-mailaddress, so I had to log out and log in again.  Now it is ok.

Strange.........

[/edit]

So nevermind my post  :-X
Title: Re:Problem with posting a message (subject empty error)!
Post by: corvettecrew on April 18, 2003, 01:16:06 AM

My website was hacked into yesterday.  The hacker put a bunch of stuff about Allah on the index page.  I thought that is all that was done, but when I went to my forum, the subject error message came up.

I did the fixes and it works now.

What I was wondering is, did the hacker have something to do with the error message?

Could my host have turned off the file uploads because they were hacked into?

Should I ask them to turn them back on?  Or is that how my website was hacked into?

some questions for you geniuses
they were hacked into?

Should I ask them to turn them back on?  Or is that how my website was hacked into?

some questions for you geniouses
Title: Re:Problem with posting a message (subject empty error)!
Post by: Coyote on April 18, 2003, 09:23:36 AM
You may find that you were not hacked via your Board, and that your host hasn't upgraded the kernal of your server.

There have been quite a few anti war hacks over the last month and they typically just graffitti the index page.

I would ask your host how you was hacked - they should know.



 
Title: Re:Problem with posting a message (subject empty error)!
Post by: mastermind on June 14, 2003, 05:27:23 AM
 >:( ???i have posted alot of subjects but there is problem with sending post the html page accor with error damn it. >:(