http://dleviet.com/ en Bug Fix - DataLife Engine Support DataLife Engine http://dleviet.com/dle/bug-fix/1467-fix-double-iddle-ajax-comments-in-full-news.html http://dleviet.com/dle/bug-fix/1467-fix-double-iddle-ajax-comments-in-full-news.html We have one error in DLE 9.0 version. In fullstory.tpl specify the place to display comments ({comments}). In this case, when viewing the full news will be displayed two tags with identical id="dle-ajax-comments", which can lead to some confusion with the use of JS in the template. Yes, and this affects the validity. If you use the withdrawal comments, indicating their place of output (and only in this case), then you must open engine/classes/comments.class.php and find Read more to see... Bug Fix admin Sun, 17 Oct 2010 21:16:30 -0600 http://dleviet.com/dle/bug-fix/1383-fix-method-post-name-xfieldsform.html http://dleviet.com/dle/bug-fix/1383-fix-method-post-name-xfieldsform.html Fix " method="post" name="xfieldsform"> Bug Fix admin Sun, 10 Oct 2010 02:55:59 -0600 http://dleviet.com/dle/bug-fix/1380-insufficient-filtering-of-incoming-data-for-dle-90.html http://dleviet.com/dle/bug-fix/1380-insufficient-filtering-of-incoming-data-for-dle-90.html Problem: Lack of filtering incoming data. Error in: All versions The degree of danger: High Bug Fix admin Sat, 02 Oct 2010 22:51:19 -0600 http://dleviet.com/dle/bug-fix/480-Insufficient-filtering-of-incoming-data-for-DLE-85.html http://dleviet.com/dle/bug-fix/480-Insufficient-filtering-of-incoming-data-for-DLE-85.html Problem: User is allowed to upload files to server (no pictures), may go beyond the permitted download folder, and if he has the administrator account, then interrogate the script. Error in version: All Versions The degree of danger: Medium (High if the administrator account are online) Distribution version 8.5 has been updated. Bug Fix admin Wed, 09 Jun 2010 23:38:50 -0600 http://dleviet.com/dle/bug-fix/475-Fix-bug-cross-site-scripting-XSS-attacks.html http://dleviet.com/dle/bug-fix/475-Fix-bug-cross-site-scripting-XSS-attacks.html Problem: Under certain conditions, your site can be attacked XSS. Attacker can steal cookies; browser if administrator use outdated browser. So he can access to authorized area. View more about XSS : http://en.wikipedia.org/wiki/Cross-site_scripting Affected version: 7.x - 8.5 The degree of danger: Low Download the patch and copy to your own server patch: dle7_85_path.zip This patch applies to all versions: 7.x - 8.5 Bug Fix admin Sun, 06 Jun 2010 03:33:19 -0600 http://dleviet.com/dle/bug-fix/373-Fix-lost-Category-of-DLE-after-move-hosting.html http://dleviet.com/dle/bug-fix/373-Fix-lost-Category-of-DLE-after-move-hosting.html Fix lost Category of DLE after move hosting Bug Fix admin Wed, 05 May 2010 22:23:06 -0600 http://dleviet.com/dle/bug-fix/309-DLE-85-SQL-fixes-User-Groups-Banners-Vote.html http://dleviet.com/dle/bug-fix/309-DLE-85-SQL-fixes-User-Groups-Banners-Vote.html You might face Unknown Column "Start" & "End" problem after Restoring DLE 8.3 SQL Its because there are two new columns in DLE 8.5 to start a Banner , Vote Transitions. Also and other col "Image_size" in user groups Here is the solution Bug Fix Pakistan Thu, 11 Mar 2010 20:09:49 -0700 http://dleviet.com/dle/bug-fix/287-Lack-of-filtering-incoming-data-in-the-module-reset-your-password-in-DataLife-Engine-82.html http://dleviet.com/dle/bug-fix/287-Lack-of-filtering-incoming-data-in-the-module-reset-your-password-in-DataLife-Engine-82.html Problem: Lack of filtering incoming data in the module reset your password. Error in version: only 8.2, the versions below 8.2, as well as the current version 8.3 is not affected The degree of danger: Very high Distribution version 8.2 has been updated. Bug Fix admin Thu, 25 Feb 2010 22:14:34 -0700 http://dleviet.com/dle/bug-fix/286-Lack-of-filtering-incoming-data-in-the-processing-of-news.html http://dleviet.com/dle/bug-fix/286-Lack-of-filtering-incoming-data-in-the-processing-of-news.html Problem: Lack of filtering incoming data in the processing of news. Error in version: All Versions before DLE 8.0 The degree of danger: Low Bug Fix admin Thu, 25 Feb 2010 21:56:42 -0700 http://dleviet.com/dle/bug-fix/185-Insufficient-filtering-of-incoming-data-for-DLE.html http://dleviet.com/dle/bug-fix/185-Insufficient-filtering-of-incoming-data-for-DLE.html Problem: Lack of filtering incoming data in the processing of news. Error in version: All Versions (except DLE 8.2) The degree of danger: Low Source : http://dle-news.ru/bags/665-nedostatochnaya-filtraciya-vxodyashhix-dannyx.html Bug Fix admin Sat, 17 Oct 2009 09:41:21 -0600