Der Fehler liegt in der Funktion print_error(), die Bestandteil der Klasse wb ist und sich in der Datei class.wb.php befindet.

Um diese Sicherheitslücke zu schleißen wird dringend ein Update auf Website Baker 2.8.1 empfohlen!

Website Baker 2.8.1 ist fertig.

Zwischen August 2009 und Februar 2010 haben die Jungs (und Mädels) von websitebaker.org einiges geleistet und Website Baker an vielen Stellen verbessert und erweitert.

Die augenscheinlich, offensichtlichste Änderung ist das in der Breite dynamische Design im Administrationsbereich.
Mir persönlich gefällt ein Design mit fester Breite ja besser, doch das zu ändern ist überhaupt kein Problem.

Neben den Modifikationen sind aber hauptsächlich kleinere und mittlere Fehler beseitigt worden.

Hier ein Auszug aus der Änderungsliste:

Change Log
===============================================================================
Please note: This change log may not be accurate

$Id: CHANGELOG 1285 2010-02-05 00:53:54Z Luisehahne $

Legend:
+ = Added
- = Removed
# = Bugfix
! = Update/Change

————————————- 2.8.1 ————————————-
01-Feb-2010 Dietmar Woellbrink (Luisehahne)
! Fixed wrong themes path in jquery_theme.js, that plugins works correctly
+ images icons to run base theme
01-Feb-2010 Dietmar Woellbrink (Luisehahne)
! to hold content, install don’t drop existing tables (code, form, menu_link, news, wrapper, wysiwyg)
! otherwise do it with uninstall
30-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #931 bug in admin/access/index.php
30-Jan-2010 Dietmar Woellbrink (Luisehahne)
! continue update headertext
! fixed tpyo Website Baker to WebsiteBaker in main language files
30-Jan-2010 Dietmar Woellbrink (Luisehahne)
! continue update headertext
# Ticket #930 disabled SyntaxHighlighter from default WB Installation
! change help url to www.websitebaker2.org
29-Jan-2010 Dietmar Woellbrink (Luisehahne)
! continue update headertext
28-Jan-2010 Dietmar Woellbrink (Luisehahne)
+ Ticket #927 news module language file in swedish
! update headertext
28-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #925 Slovak Lang Missing in allowed install languages!
28-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update headertext
28-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update jquery 1.4.0 to 1.4.1,
- removed include/jquery/plugins
! update backend themes
#24-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #923 argos_theme: Always Allowed Viewers in page_settings
# fixed css for pagetree to show in IE7
24-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #921 fix issues in IE by using EditArea framework
23-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Ticket #921 Update EditArea framework
! fix stylings wb_them
! fix upgradescript
23-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update jquery to version 1.4, rename old one to jquery-min132.js
# fixed argos theme
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
! continue update header info
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
! set svn keywords
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #869 Droplet-Engine does’nt work in some case
! continue update header info
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update header info
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update fckeditor, forgotten to upload a file
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #917 Update backend themes
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Ticket #909 WYSIWYG Editor width destroyes backend layout
! Set EDITOR_WIDTH to 0, This way backend theme developper
! can style the WYSIWYG Editor according to their themes.
22-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Ticket #916 Update backend theme footer
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
! updated YUI 2.4.1 to 2.8.0r4
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Beginning header information update
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fix login_form.php sometimes produce javascript errors in IE
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fix more small css-errors in WB Backend (thanks to Ruebenwurzel)
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update header info
! change unknown user to guest in all languages
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update info.php fckeditor
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fix wrong settings in image browser dialog
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #912 fix Search Template bug
21-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #915 fix bug in search (utf-8 characters corrupted)(thanks to Thorn)
19-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fix some more small css-errors in WB Backend (thanks to Ruebenwurzel)
19-Jan-2010 Dietmar Woellbrink (Luisehahne)
# removed wb_path as javascript var (thanks to Bianca)
19-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fix some more small css-errors in WB Backend (thanks to Ruebenwurzel)
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fixed snippets including frontend.css and frontend.js
# without register_frontend_modfiles
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
+ Ticket #877 add slovak lang in Captcha and Advanced-Spam-Protection
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
! update header
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #911 5. continue to fix CSS-errors in WB backend
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #911 4. continue to fix CSS-errors in WB backend
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #911 3. continue to fix CSS-errors in WB backend
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #911 2. continue to fix CSS-errors in WB backend
14-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #911 1. continue to fix CSS-errors in WB backend
13-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #911 Beginning to fix More CSS-errors in WB backend
+ add SVN- Revision to backend theme
12-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #906 Search Template bug
! update editor min width, dragableresize table
12-Jan-2010 Dietmar Woellbrink (Luisehahne)
# Ticket #907 js files in backend themes are stored at wrong places
+ add include/jquery/plugins/toggle_zip.js
- removed toggle_zip.js in backend themes
12-Jan-2010 Dietmar Woellbrink (Luisehahne)
# fix open_basedir restriction in effect in save_post.php
11-Jan-2010 Dietmar Woellbrink (Luisehahne)
! fix load_module, load_language (tks to Webbird)
11-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Ticket #904 fix if templatename is equal language
11-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Ticket #905 fix search.php ‘registered’ hardcoded
10-Jan-2010 Dietmar Woellbrink (Luisehahne)
! Ticket #903 fix CSS-errors in WB backend
! add title class in show_breadcrumbs, now full css styling
05-Jan-2010 Dietmar Woellbrink (Luisehahne)
! recoded function show_breadcrumbs
30-Dec-2009 Dietmar Woellbrink (Luisehahne)
# fix Warning: stristr() [function.stristr]
29-Dec-2009 Dietmar Woellbrink (Luisehahne)
! set revision constant to release version
29-Dec-2009 Dietmar Woellbrink (Luisehahne)
! update release version
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
# fix show date if only short content
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! check if load only one wysiwyg instance
! check update svn revision
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
# fix syntax error
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! update header, check that all tables in WB package are installed
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! update header, change variable
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! update header
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! update header
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! validate code
28-Dec-2009 Dietmar Woellbrink (Luisehahne)
! change page_title to menu_title in dropdown list
! validate code
23-Dec-2009 Dietmar Woellbrink (Luisehahne)
! check if revision $id will be updated
21-Dec-2009 Moritz Stapelfeldt
# Ticket #896: Bugfix in framework/functions.php > added test is_dir to function rm_full_dir
16-Dec-2009 Ruud Eisinga
# Ticket #894: Bugfixes in newsmodule > rss.php
16-DEC-2009 Manuel Lang (MaGnaL)
# Minor bugfixes: Use localized messages in preference forms on frontend and backend,
correct html/php syntax in upgrade-script.php and NL localization of show_menu2 snippet
14-DEC-2009 Manuel lang (MaGnaL)
# Ticket #832: Fix wrong configuration of timezone-handling when saving
preferences-form on backend and frontend
12-DEC-2009 Manuel Lang (MaGnaL)
# Ticket #827: Fix false form-parameter when javascript is deactivated
on users and groups temps (admintool).
12-DEC-2009 Manuel Lang (MaGnaL)
# Bugfix of rev. 1211 search_modext.php (ticket #863): Use isset and
given unknown-user instead of counting all users.
12-Dez-2009 Dietrich Roland Pehlke (Aldus)
# Bugfix inside “search_modext.php” to avoid warings if the search found
a page last modified by a user witch has been deleted. (ticket #863)
03-Dez-2009 Dietmar Woellbrink (Luisehahne)
! Ticket #890 fixed visability proprty uses non valid value ‘none’
03-Dez-2009 Dietmar Woellbrink (Luisehahne)
! change searchstring mdcr.js, workout crypt emails in output_filter/filter-routines.php
! comment out ob_end_flush line 259 in form/view.php
02-Dez-2009 Dietmar Woellbrink (Luisehahne)
! next step to validate backend themes
01-Dez-2009 Dietmar Woellbrink (Luisehahne)
! add Revision IDs to added files – Thanks to Ruebenwurzel
01-Dez-2009 Dietmar Woellbrink (Luisehahne)
! updated pclzip class
29-Nov-2009 Dietmar Woellbrink (Luisehahne)
! update module info.php (thanks to Waldschwein)
29-Nov-2009 Dietmar Woellbrink (Luisehahne)
! added missing swobject plugin in FCKeditor
! bug fixed in flvplayer
29-Nov-2009 Dietmar Woellbrink (Luisehahne)
! stop working plugin flvplayer in FCKeditor until fixed
29-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fixed an undefined index in settings.php
28-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Update FCKeditor Version 2.6.5 to Modulversion 2.9.3
28-Nov-2009 Dietmar Woellbrink (Luisehahne)
! updated theme.css in wb_theme
28-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Ticket #886 fix validation email, check tld between 2-4 letters
28-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Ticket #874 add slovak lang in install
and validate output
28-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Ticket #880 fixes language file SK.php
28-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Ticket #828 fix deprecated eregi
27-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fixes language file SK.php
27-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fixed parse error ticket #878
26-Nov-2009 Dietmar Woellbrink (Luisehahne)
! found and fix some deprecated functions
26-Nov-2009 Dietmar Woellbrink (Luisehahne)
! validate some output files
26-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fix some PHP 5.3 deprecated functions
25-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Fix to load edit_full_area only if needed
25-Nov-2009 Dietmar Woellbrink (Luisehahne)
! change page_title to menu_title for parent dropdown list in index.php and sections.php
25-Nov-2009 Dietmar Woellbrink (Luisehahne)
! more bug fixes language file SK.php
25-Nov-2009 Dietmar Woellbrink (Luisehahne)
! Many hosts disable error_log() in various and sundry ways.
In WB we do something like this to avoid triggering warnings and errors.
Even this is sometimes not sufficient to avoid problems with some hosts, but accommodates most.
25-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fix show_menu2 include.php, page crashes, if php error_log is disabled
25-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fixes language files HU.php and SK.php
24-Nov-2009 Dietmar Woellbrink (Luisehahne)
! fixed php 5.3 depricated function in show_menu2
24-Nov-2009 Dietmar Woellbrink (Luisehahne)
+ add two constants in /framework/initialize.php for later feature in database settings
+ define(‘EDIT_ONE_SECTION’, true) to edit only one section with editor in manage sections
modify page will be loading all sections with editor
+ define(‘EDITOR_WIDTH’, 900) set min width for editor
+ adding more information in editor header 1) block 2) module 3) section_id
24-Nov-2009 Dietmar Woellbrink (Luisehahne)
+ add register_frontend_modfiles(‘jquery’); adds jquery basis scripts in head
+ add register_frontend_modfiles_body(‘jquery’); adds jquery basis scripts before body end
+ add jquery_theme.js to choose a ui theme, basis is loaded, can be change
24-Nov-2009 Dietmar Woellbrink (Luisehahne)
+ add a child page is cumbersome when the parent dropdown list gets to be too large. (Ticket #821)
24-Nov-2009 Dietmar Woellbrink (Luisehahne)
! validate captcha control
13-Oct-2009 Ruud Eisinga
# fixed breaking droplets by highlighting search-words in search result pages.
13-Oct-2009 Dietmar Woellbrink (Luisehahne)
+ added forgotten jquery-fancybox.js Version 1.0
13-Oct-2009 Dietrich Roland Pehlke (Aldus)
# Fixed typo in the finnish language file (ticket #814).
12-Oct-2009 Dietmar Woellbrink
! security update FCKeditor (tks to Ruebenwurzel)
12-Oct-2009 Dietmar Woellbrink
+ added old version of fancybox.js
! rename new version fancybox
+ added missing language variables in newsmodul
12-Oct-2009 Dietmar Woellbrink
# fixes Bugs headersend errors in some core files
12-Oct-2009 Dietmar Woellbrink
! update function show_bread_crumb in framework/frontend.functions.php
! replace separator with entities char, add title for multilingual
! set breakcrumb in div container class=”breadcrumb”
! set separator in span tag class=”separator”
12-Oct-2009 Dietmar Woellbrink
! update jquery fancybox from 1.0 to 1.2.1
+ fancybox imagefolder incl. fancybox.css
12-Oct-2009 Dietmar Woellbrink
! shows more details in wysiwyg editor
10-Oct-2009 Dietmar Woellbrink
! small update upgrade.php to reset newsfiles to created dates
10-Oct-2009 Dietmar Woellbrink
! Update FCKeditor to Version 2.6.5 Modulversion 2.9.1
09-Oct-2009 Dietmar Woellbrink
! Update FCKeditor to Version 2.6.5 Modulversion 2.9.1
09-Oct-2009 Dietmar Woellbrink
+ upgrade.php to reset newsfiles to created dates
09-Oct-2009 Dietmar Woellbrink
# Ticket #770, #785, #792, #807, #809,
# fixes and recoded news module
09-Oct-2009 Dietmar Woellbrink
# Ticket #815 Fix Warning: open_basedir restriction in effect. File is in wrong directory in load_module
# same fix to load_template
07-Oct-2009 Dietrich Roland Pehlke
# Missing contiue inside search.php to avoid access to an non-object if the query fails. (ticket #793). Thanks to Thorn.
06-Oct-2009 Dietmar Woellbrink
# Security fix – wrong placed “exit()” inside class.wb.
22-Sep-2009 Dietmar Woellbrink
# Fixed: Pagetree changed menu titles instead of page titles (ticket #805) thanks to Ralf (Berlin)
21-Sep-2009 Dietrrich Roland Pehlke
! Dutch tranlation(-s) for the captcha-control. [Ticket: #777] (Thanks to Argos)
# Missing code inside “framework/addon.precheck.php” (ticket #798).
# Changes inside “upgrade-script” to avoid “mysql_list_tables is deprecated” warnings (ticket #800).
# Add “global $admin” to the install.php of the droplets-module to avoid (variable isn’t declared) warnings. (ticket #800).
18-Sep-2009 Dietmar Woellbrink
# french translation updated for WB 2.8 (tks to Ploc)
16-Sep-2009 Dietmar Woellbrink
# Fixed bug changed URL_HELP in class.admin.php to http://help.websitebaker.org/ (ticket #801).
# Fixed bug: inside the FCK-Editor wbmodul: missing ‘OK’ button when inserting WB link with Safari/Chrome (ticket #795).
# Fixed bug changed png fix and path to jquery-pngFix.js inside footer.htt for backend themes (ticket #786).
# Fixed bug: inside the FCK-Editor include.php: add $oFCKeditor->Width = $width; (ticket #799).
15-Sep-2009 Dietrich Roland Pehlke
# Fixed bug: group-restrictions and sections (ticket #791).
# Fixed bug inside the FCK-Editor wbmodul: displaying the correct page-tree by
adding “order by position”
25-Aug-2009 Dietrich Roland Pehlke
# Fixed bug in upgrate-script. Constant ‘DEFAULT_THEME’ doesn’t exists (ticket #784).
25-Aug-2009 Ruud Eisinga
# Fixed bug in droplets. Multiple droplets with the same parameter did not extract the new parameter.
(problem introduced by code optimisations for WB2.8)
# Fixed usage of the depriciated (PHP 5.3.0) split() function in class.wb. (ticket #772)
# Fixed notice ob_end_clean..failed to delete buffer. (ticket #779)
22-Aug-2009 Ruud Eisinga
# Changed the default searchform name in the installer. (ticket #775)
# Fixed the recursive redirect problem when a page is called with a wrong language parm (ticket #780)

Website Baker 2.8.1 herunterladen …