So when you register yourself, you'll get an email with a verification link and a code to enter to the webpage when you can't click on the link... The validation page looks like this: http://blog.f00.ch/validation.php.

The patch for this is available at: http://pastebin.ch/510 (right-click on 'Plain Text' and choose 'save as..' to download it.)

You have to alter your db. Here's the SQL: http://pastebin.ch/506.

This patch changes:

-Store PW's md5-hashed.

-Make eggblog savemode-save.

-You have to provide username && password && email && captcha, instead of captcha only.

-You will recieve an email to activate your account.

-FIX: It's not possible to login if your account is deleted (==deactivated) or not activated yet.

-Text-Captcha, Allowing user with textbrowsers or screenreaders to register.
-Fixed the problem with saving links and texts containing the "

Next things I gonna implement:

-Salted md5's

-Forgot-PW: Setting a new PW and email this instead of mailing the not very useful hash.

Please feel free to comment my work.

~cimnine

PS: (c) for this patch is mine. But I distribute the patch under the terms of the GNU GPL. So feel free to change it. ~cimnine

Comments

Dear cimnine

I've have used your patch on the blog software (php files), but after this nice update I will not have the admin panel anymore .. do you know what I have to check , to get the admin panel back. This is where you can change the users, make new articles etc.

Regards,
Eric Oosterbaan
scdzaak - The Netherlands

scdzaak - 4:45pm, Monday 22 December 2008.

Dear cimnine,

After your patch, you have to make a new user .. but the new user is not standard the administrator ... thats why I lost the 'admin panel' ...

Regards,
Eric

scdzaak - 4:47pm, Monday 22 December 2008.

Dear All,

To fix the above 'problem':
Dump the old database you made by the default package.
Make by hand a new database .. copy the install.php back to the webserver.
Start the install.php .. add the new line for the user from the patch ...
Restart the logon .. and you will see everything fine.

Eric

scdzaak - 5:42pm, Monday 22 December 2008.

Dear All,

The next 'problem' after registry the new user will receive the activation email .. but nothing is found in the MySQL database about the new user ... something missing in the script ?

Regards,
Eric

scdzaak - 3:04pm, Tuesday 23 December 2008.

FIXED .. Check the fieldname extra in the eb_users : user_key.

Eric

scdzaak - 3:18pm, Tuesday 23 December 2008.

Submit Your Comment

You are not logged in.