±Recent Visitors

Recent Visitors to Com-Central!

±User Info-big


Welcome Anonymous

Nickname
Password

Membership:
Latest: Robski
New Today: 0
New Yesterday: 0
Overall: 6641

People Online:
Members: 0
Visitors: 450
Total: 450
Who Is Where:
 Visitors:
01: Member Screenshots
02: Member Screenshots
03: Member Screenshots
04: Community Forums
05: Community Forums
06: Photo Gallery
07: CPGlang
08: Community Forums
09: Community Forums
10: Community Forums
11: Community Forums
12: Community Forums
13: Downloads
14: CPGlang
15: Member Screenshots
16: Community Forums
17: Home
18: Home
19: Home
20: Member Screenshots
21: Community Forums
22: Community Forums
23: Community Forums
24: Community Forums
25: Community Forums
26: Community Forums
27: Community Forums
28: Member Screenshots
29: Member Screenshots
30: Member Screenshots
31: Community Forums
32: Member Screenshots
33: Member Screenshots
34: Member Screenshots
35: Community Forums
36: Photo Gallery
37: Photo Gallery
38: Community Forums
39: Member Screenshots
40: Member Screenshots
41: Member Screenshots
42: Member Screenshots
43: Member Screenshots
44: Member Screenshots
45: Member Screenshots
46: Member Screenshots
47: Member Screenshots
48: Member Screenshots
49: Member Screenshots
50: Member Screenshots
51: Member Screenshots
52: Member Screenshots
53: Member Screenshots
54: Member Screenshots
55: Member Screenshots
56: Member Screenshots
57: Member Screenshots
58: Member Screenshots
59: Member Screenshots
60: Member Screenshots
61: Member Screenshots
62: Member Screenshots
63: Member Screenshots
64: Member Screenshots
65: Community Forums
66: Member Screenshots
67: Photo Gallery
68: Member Screenshots
69: Member Screenshots
70: Member Screenshots
71: Member Screenshots
72: Member Screenshots
73: Member Screenshots
74: Member Screenshots
75: Member Screenshots
76: Member Screenshots
77: Member Screenshots
78: Member Screenshots
79: Community Forums
80: Downloads
81: Community Forums
82: Member Screenshots
83: Community Forums
84: Community Forums
85: Home
86: Community Forums
87: Member Screenshots
88: Member Screenshots
89: Member Screenshots
90: Member Screenshots
91: Community Forums
92: Downloads
93: Community Forums
94: Member Screenshots
95: Member Screenshots
96: Member Screenshots
97: Community Forums
98: Member Screenshots
99: Member Screenshots
100: Member Screenshots
101: Member Screenshots
102: Home
103: Community Forums
104: Photo Gallery
105: Community Forums
106: Community Forums
107: Community Forums
108: Community Forums
109: Photo Gallery
110: Community Forums
111: CPGlang
112: Home
113: Photo Gallery
114: Member Screenshots
115: Community Forums
116: Community Forums
117: Member Screenshots
118: Community Forums
119: News Archive
120: CPGlang
121: Home
122: Community Forums
123: Community Forums
124: Community Forums
125: Community Forums
126: Home
127: Community Forums
128: Community Forums
129: Member Screenshots
130: Member Screenshots
131: Member Screenshots
132: Member Screenshots
133: Member Screenshots
134: Member Screenshots
135: Member Screenshots
136: Member Screenshots
137: Community Forums
138: Downloads
139: Community Forums
140: Member Screenshots
141: Member Screenshots
142: Member Screenshots
143: Member Screenshots
144: Member Screenshots
145: Member Screenshots
146: Member Screenshots
147: Member Screenshots
148: CPGlang
149: Home
150: Community Forums
151: CPGlang
152: Downloads
153: Member Screenshots
154: Member Screenshots
155: Community Forums
156: CPGlang
157: Member Screenshots
158: Community Forums
159: Community Forums
160: Home
161: Member Screenshots
162: Member Screenshots
163: Community Forums
164: Community Forums
165: Downloads
166: Community Forums
167: Member Screenshots
168: Member Screenshots
169: Community Forums
170: Community Forums
171: Community Forums
172: Member Screenshots
173: Member Screenshots
174: Member Screenshots
175: Member Screenshots
176: Community Forums
177: CPGlang
178: Community Forums
179: Community Forums
180: Community Forums
181: Community Forums
182: Community Forums
183: CPGlang
184: Photo Gallery
185: Member Screenshots
186: Member Screenshots
187: Community Forums
188: Home
189: Home
190: Community Forums
191: Member Screenshots
192: Member Screenshots
193: Member Screenshots
194: Member Screenshots
195: Member Screenshots
196: Member Screenshots
197: Member Screenshots
198: Photo Gallery
199: Community Forums
200: Member Screenshots
201: Member Screenshots
202: Member Screenshots
203: Community Forums
204: Member Screenshots
205: Member Screenshots
206: Community Forums
207: Member Screenshots
208: Member Screenshots
209: Member Screenshots
210: Member Screenshots
211: Member Screenshots
212: Member Screenshots
213: Community Forums
214: Member Screenshots
215: Member Screenshots
216: Member Screenshots
217: Member Screenshots
218: Member Screenshots
219: Member Screenshots
220: Community Forums
221: Community Forums
222: Community Forums
223: Community Forums
224: Community Forums
225: Community Forums
226: Community Forums
227: Member Screenshots
228: Member Screenshots
229: Community Forums
230: Photo Gallery
231: Member Screenshots
232: Community Forums
233: Member Screenshots
234: Member Screenshots
235: Member Screenshots
236: Community Forums
237: Community Forums
238: Community Forums
239: Member Screenshots
240: Member Screenshots
241: Member Screenshots
242: Member Screenshots
243: Member Screenshots
244: Community Forums
245: Community Forums
246: Community Forums
247: Community Forums
248: CPGlang
249: Community Forums
250: Home
251: Community Forums
252: Member Screenshots
253: Member Screenshots
254: Community Forums
255: Community Forums
256: Member Screenshots
257: Community Forums
258: Community Forums
259: Member Screenshots
260: Member Screenshots
261: Member Screenshots
262: Member Screenshots
263: Home
264: Community Forums
265: Community Forums
266: Community Forums
267: Community Forums
268: Member Screenshots
269: Member Screenshots
270: Community Forums
271: Community Forums
272: Community Forums
273: Member Screenshots
274: Member Screenshots
275: Member Screenshots
276: Community Forums
277: Photo Gallery
278: Member Screenshots
279: Member Screenshots
280: Member Screenshots
281: Member Screenshots
282: Community Forums
283: Photo Gallery
284: Member Screenshots
285: Member Screenshots
286: Member Screenshots
287: Member Screenshots
288: Member Screenshots
289: Community Forums
290: Community Forums
291: Community Forums
292: Community Forums
293: Community Forums
294: Community Forums
295: Community Forums
296: Community Forums
297: Home
298: Photo Gallery
299: Member Screenshots
300: Community Forums
301: Community Forums
302: Downloads
303: Community Forums
304: Community Forums
305: Member Screenshots
306: Community Forums
307: Community Forums
308: Statistics
309: Member Screenshots
310: Community Forums
311: Member Screenshots
312: Photo Gallery
313: Photo Gallery
314: Photo Gallery
315: Community Forums
316: Community Forums
317: Community Forums
318: Community Forums
319: Community Forums
320: Home
321: Community Forums
322: CPGlang
323: Community Forums
324: Home
325: Community Forums
326: Photo Gallery
327: Member Screenshots
328: Member Screenshots
329: CPGlang
330: Member Screenshots
331: Member Screenshots
332: Member Screenshots
333: Member Screenshots
334: Member Screenshots
335: Member Screenshots
336: Photo Gallery
337: Member Screenshots
338: Community Forums
339: Member Screenshots
340: Community Forums
341: Downloads
342: Downloads
343: Downloads
344: Downloads
345: Community Forums
346: Member Screenshots
347: Community Forums
348: Community Forums
349: Community Forums
350: Community Forums
351: Home
352: Photo Gallery
353: Member Screenshots
354: Member Screenshots
355: Member Screenshots
356: Member Screenshots
357: Member Screenshots
358: Member Screenshots
359: Member Screenshots
360: Member Screenshots
361: Community Forums
362: Community Forums
363: Community Forums
364: Community Forums
365: Community Forums
366: Community Forums
367: Community Forums
368: Member Screenshots
369: Community Forums
370: Member Screenshots
371: Home
372: Member Screenshots
373: CPGlang
374: Member Screenshots
375: Community Forums
376: Home
377: Community Forums
378: Community Forums
379: Community Forums
380: Community Forums
381: Member Screenshots
382: Member Screenshots
383: Member Screenshots
384: Member Screenshots
385: CPGlang
386: Photo Gallery
387: Community Forums
388: Member Screenshots
389: Community Forums
390: Community Forums
391: Photo Gallery
392: Member Screenshots
393: Member Screenshots
394: Member Screenshots
395: Member Screenshots
396: Downloads
397: Community Forums
398: Community Forums
399: Community Forums
400: Community Forums
401: Member Screenshots
402: Member Screenshots
403: Member Screenshots
404: Member Screenshots
405: Member Screenshots
406: Member Screenshots
407: Member Screenshots
408: Member Screenshots
409: Community Forums
410: Member Screenshots
411: Community Forums
412: Community Forums
413: Member Screenshots
414: Member Screenshots
415: Home
416: Member Screenshots
417: Member Screenshots
418: Community Forums
419: Downloads
420: Member Screenshots
421: Member Screenshots
422: Downloads
423: Community Forums
424: Community Forums
425: Member Screenshots
426: Member Screenshots
427: Member Screenshots
428: Member Screenshots
429: Home
430: Home
431: Member Screenshots
432: Community Forums
433: Home
434: Community Forums
435: Home
436: Community Forums
437: Home
438: Member Screenshots
439: Member Screenshots
440: Member Screenshots
441: Member Screenshots
442: Member Screenshots
443: Member Screenshots
444: Community Forums
445: Member Screenshots
446: Photo Gallery
447: Community Forums
448: CPGlang
449: Community Forums
450: Home

Staff Online:

No staff members are online!
Page themes fixed...
The AFV ASSOCIATION was formed in 1964 to support the thoughts and research of all those interested in Armored Fighting Vehicles and related topics, such as AFV drawings. The emphasis has always been on sharing information and communicating with other members of similar interests; e.g. German armor, Japanese AFVs, or whatever.
Go to page Previous  1, 2
Post new topic    Reply to topic    Printer Friendly Page     Forum Index ›  AFV News Discussion Board

View previous topic :: View next topic  
Author Message
Doug_Kibbey
Power User

Offline Offline
Joined: Jan 23, 2006
Posts: 4667
Location: The Great Satan
PostPosted: Sun Feb 05, 2012 10:26 pm
Post subject: Re: Page themes fixed...

The chief building superintendent sez:

"I've come across some information on this. Since the update prior to this last one, the updated BBcode has changed and that new change will not allow spaces in the URL link. A request to revamp the code has been made..."

...roughly meaning: "We've asked, and are awaiting a response, about which we haven't a lot of say."
Back to top
View user's profile Visit poster's website Photo Gallery
Smashy
Power User

Offline Offline
Joined: Aug 05, 2010
Posts: 112

PostPosted: Mon Feb 06, 2012 12:09 am
Post subject: Re: Page themes fixed...

- Doug_Kibbey
The chief building superintendent sez:

"I've come across some information on this. Since the update prior to this last one, the updated BBcode has changed and that new change will not allow spaces in the URL link. A request to revamp the code has been made..."

...roughly meaning: "We've asked, and are awaiting a response, about which we haven't a lot of say."


This is very important as linux web servers allow users to create folder names & file names with spaces in them and there are a heck of a lot of linux web servers out there.

If I remember correctly the workaround is you must surround the filename with quotation marks?

_________________
Smashy
Back to top
View user's profile
Doug_Kibbey
Power User

Offline Offline
Joined: Jan 23, 2006
Posts: 4667
Location: The Great Satan
PostPosted: Mon Feb 06, 2012 11:36 pm
Post subject: Re: Page themes fixed...

- Smashy
- Doug_Kibbey
The chief building superintendent sez:

"I've come across some information on this. Since the update prior to this last one, the updated BBcode has changed and that new change will not allow spaces in the URL link. A request to revamp the code has been made..."

...roughly meaning: "We've asked, and are awaiting a response, about which we haven't a lot of say."


This is very important as linux web servers allow users to create folder names & file names with spaces in them and there are a heck of a lot of linux web servers out there.

If I remember correctly the workaround is you must surround the filename with quotation marks?



Here's the latest (and we can assume final) word on this subject:

"I'm still looking into this issue and this is what I've learned to date...

The BBcode code writers, (the code used on most forums and here at CC), has found a security issue with the older code which allowed spaces in the URL link. At the moment, the code writers are 'sticking to their guns' about not allowing spacing in URL's.

Some of the pic hosting sites on the web such as PhotoBucket allow using spaces in their URL's so it's going to be a bigger problem than some realize if those sites don't update their policies. It's too easy to include malicious code in broken (using spaces) URL's and that could include redirect scripts that would allow a hacker to point others to a different site than you had intended to use or inserting JAVA code to install hacker code into your personal computer.

A more 'techy' point of view:

One way to think about this problem is as well to check on server side that GET and POST request are not equivalent.

A POST request can alter data in server side, a GET request mustn't change anything. That's the HTTP protocol. An IMG tag is a GET request, always. And the browser can perform this GET request without any risk, so the problem is on server side, every action that can change alter data (database, session, etc) must check the request is a POST one. For example your /post url, should return asking for a POST confirmation. If this is wrong in your application, then you'll have problems not only with altered IMG tags, but maybe as well with 'html page speeders' that make preload of GET references, or even bots.

It's possible to 'force' (rewrite) the code, but I think we should error in the way of security as it's our duty to try to protect our users as much as possible."




Sorry for any inconvenience, but site and member safety come first, as it should be.
I'm no authority, but I have plenty of anecdotal experience that suggests that it's not good practice to include spaces in any filenames, etc....and it's also not wise to make them any longer than they have to be.
Back to top
View user's profile Visit poster's website Photo Gallery
Roy_A_Lingle
Power User

Offline Offline
Joined: Jan 24, 2006
Posts: 1997
Location: El Paso & Ft Bliss, Texas
PostPosted: Tue Feb 07, 2012 10:20 pm
Post subject: Re: Page themes fixed...

Hi Doug! Hi Folks!

Thanks for the update! The last thing we all need is to lose another site.

Sgt, Scouts out!

_________________
"You can never have too much reconnaissance."
General G.S. Patton Jr.
Back to top
View user's profile Send e-mail
Display posts from previous:   
Post new topic    Reply to topic    Printer Friendly Page    Forum Index ›  AFV News Discussion Board
Page 2 of 2
All times are GMT - 6 Hours
Go to page Previous  1, 2



Jump to:  


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum