is an Open Source, PHP
-based content management system (CMS) that can be deployed as a blog, bulletin or message board, Internet forum, and wiki. It is extensible via PHP panels and is HTML5
Bugs and Exploits
Friday, Aug 26, 2005, 12:00 AM (Revision 23 - Wednesday, May 29, 2013, 5:25 AM)
Although MAJ started as a family project, care has been taken to make it as "safe" as possible. With more people now working on MAJ, bugs and exploitable code may sometimes slip in. We invite you to poke around and see if you can find any. Generally, there are two things you can do when you find a MAJ or PHP-related bug or exploit:
1. Take advantage of it. But hey, what's so exciting about messing up someone's blog? Ho-hum, right?
2. Report it here
so that we can work on a fix and make MAJ better.
$HTTP_POST_FILES not working in PHP 5 (20050826)
RSS feeds empty if entries per page is undefined (20051028)
Categories cannot be deleted if ID has white space(s)
[discovered by RJ Mortega
RSS feeds show password-protected entries
[discovered by Dominique Cimafranca
Some browsers won't download on-the-fly generated PDF files (20060821)
Site search shows password-protected entries
[fixed by Psylocke Antonio
Album thumbnails break when parent image filenames contain a space (20061031)
Entries break when PHP magic_quotes_gpc is on
[discovered by Cara Bébé
[majBB] Flaky profile views updates (20061218)
[majBB] Wrong translation of some bb2ml characters (20070605)
[majBB] Mismatching of some ml2bb entries
[fixed by Magie Antonio
Album thumbnails break under GD2 (20071008)
Some HTML entries break edit CSS (20071018)
Profanity filter not applied on search results (20071109)
Wrong $ratio_posts computation (20071231)
User registration fails if mobile number is not required
[discovered by Mark Gil Mercado] (20110823)
• ISO 8601 lastmod format invalid in Google Sitemaps (Google problem?)
|Thursday, Nov 27, 2008, 10:42 AMSir, tried installing the latest maj zip file - maj-0.14-20081107-bb.zip. "maj" and "php" does not log me in.|
|Thursday, Nov 27, 2008, 3:32 PMHi Herson, thanks for your note. Please check if the directory that you unpacked MAJ in is writable by httpd. |
|Wednesday, Jan 21, 2009, 10:15 PMI'm testing the BB function of maj and our users can't get the confirmation emails while registering. Do I still need to configure sendmail for this? I only have the vanilla sendmail courtesy of yum install
Same thing for the mailing list function.
|Thursday, Jan 22, 2009, 11:34 AMHi Herson, MAJ currently uses the PHP |
As per http://www.php.net/manual/en/mail.requirements.php :
For the Mail functions to be available, PHP must have access to the sendmail binary on your system during compile time. If you use another mail program, such as qmail or postfix, be sure to use the appropriate sendmail wrappers that come with them. PHP will first look for sendmail in your PATH, and then in the following: /usr/bin:/usr/sbin:/usr/etc:/etc:/usr/ucblib:/usr/lib. It's highly recommended to have sendmail available from your PATH. Also, the user that compiled PHP must have permission to access the sendmail binary.
I hope this helps.
|Friday, Jan 23, 2009, 10:24 AMMy bad, sendmail is indeed turned off. its working now |
|Friday, Jan 9, 2015, 6:32 PMLooking forward to learn and know more about this. |
Fill out the form below and enter cit204q in the CAPTCHA field to add your comment. Please wait for your comment to be approved and posted. Comments with bogus contact information or spam will be discarded.