Joomla Extensions Demo

Support

Do not submit a bug report if you need technical support or have questions.

Forums

Post your suggestions ask for help in the community forums

Contact Me

Missing images/links, any comments, suggestions, need help? Contact me

Skype

Need desperately help?
Skype Me™! But dont abuse of it!

Nasty Bug in SecurityImages 5.1.2

software_bugs_dilbert

Thanks to Margus Pala, a security Flaw has been reported and corrected in SecurityImages version 5.1.2 and previous

The flaw is of moderate level, in register forms, spammers are able to register without solving the Captcha!

  • It affect only SecurityImages 5.x for Joomla! 1.5
  • SecurityImages 6.x for Joomla! 1.6 is not affected

In order to resolve this issue, you don’t have to install any new version of SecurityImages, you must either

  • Update your blog with the right version of the joomla! patches, the all end with Joomla_1.5.x-Stable-Full_PackageForSecurityImages5.y.z_v01.03.00

OR

  • Edit the file components\com_user\controller.php and remove the line 274 ($this->register())
if ($useSecurityImagesInRegister && !$this->checkSecurityImagesCaptcha()) {
  JError::raiseWarning('', JText::_('SECURITYIMAGES REJECT USER ENTRY'));  
  $this->register();
  return false;
}

These patches versions have the flaw

04/12/2008  Joomla_1.5.1-Stable-Full_PackageForSecurityImages5.0.0.zip
05/01/2008  Joomla_1.5.2-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
05/01/2008  Joomla_1.5.3-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
07/10/2008  Joomla_1.5.4-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
08/03/2008  Joomla_1.5.5-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
08/03/2008  Joomla_1.5.6-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
08/19/2008  Joomla_1.5.6-Stable-Full_PackageForSecurityImages5.1.0_v01.00.00.zip
09/13/2008  Joomla_1.5.7-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
09/20/2008  Joomla_1.5.7-Stable-Full_PackageForSecurityImages5.1.0_v01.00.00.zip
11/11/2008  Joomla_1.5.8-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
01/19/2009  Joomla_1.5.8-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
01/19/2009  Joomla_1.5.9-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
03/28/2009  Joomla_1.5.10-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
06/03/2009  Joomla_1.5.11-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
07/04/2009  Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
07/26/2009  Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
07/26/2009  Joomla_1.5.14-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
09/11/2009  Joomla_1.5.14-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
11/09/2009  Joomla_1.5.15-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
04/24/2010  Joomla_1.5.16-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
04/24/2010  Joomla_1.5.17-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
09/12/2010  Joomla_1.5.18-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
04/24/2010  Joomla_1.5.20-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
01/09/2011  Joomla_1.5.21-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
01/09/2011  Joomla_1.5.22-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
01/09/2011  Joomla_1.5.23-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip

You can download the updated versions in HERE or search the download section, type 1.5.23 for the patches for 1.5.23 for example

Category: SecurityImages

HOW to make your own patches for securityimages

Just in case I take too much time to deliver a ready to use download, duration 5 minutes, but you need to understand basic php coding

  1. Create a temporary directory c:\patch
  2. Copy an existing patch distribution, under a new name
    For example, lets download Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip into c:\patch\ and copy it to c:\patch\Joomla_1.5.14-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
  3. Download the latest full zip package of Joomla that target the patch (here 1.5.14), so I download Joomla_1.5.14-Stable-Full_Package.zip and save it in the same directory c:\patch\
    patches.for.securityimages.howto
  4. Now download a free trial copy of Beyond compare from www.scootersoftware.com and install this great application
  5. Select the 2 zip files, and right click “compare”
    patches.for.securityimages.howto.1
  6. Now it is like a game, on the left side, you have you patch that need to be updated with the latest Joomla! core changes, just edit every file present on the left and update line that are new or changed till you are finished. Luckily there is only 14 files to merge
    patches.for.securityimages.howto.2
  7. Test the result in a Joomla test instance.

I do this for you at each release of Joomla!

Category: SecurityImages

SecurityImages 5.1.2 available

smallbox_securityimages

This version should improve installations on some host, where the plugin securityimages.php did not always install properly. The reason behind is that I did add falsely an additional file index.html in plugin.zip. This may lead to permissions issues during installation. SecurityImages 5.1.2 do not contains any other changes, so If you’re happily running SecurityImages 5.1.1, no need to upgrade!

Download
Details

Category: SecurityImages

Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip

smallbox_securityimages

Only for SecurityImages 5.1.x and Joomla! 1.5.13

Allow login views, login modules, register, lost password, lost user account and contact section to be
protected by SecurityImages

  • Are for Joomla! 1.5.13 only and SecurityImages 5.1.x or later
  • 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
    for more details
  • Download file Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip (33kB) and
    overwrite file on your server
  • Go to Joomla! control panel and HIT at least SAVE configuration once, this will add a new boolean value
    (true or false) in Joomla! configuration for using SecurityImages.

 

Category: SecurityImages

Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip

smallbox_securityimages

Only for SecurityImages 5.1.x and Joomla! 1.5.12

Allow login views, login modules, register, lost password, lost user account and contact section to be
protected by SecurityImages

  • Are for Joomla! 1.5.12 only and SecurityImages 5.1.x or later
  • 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
    for more details
  • Download file Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip (33kB) and
    overwrite file on your server
  • Go to Joomla! control panel and HIT at least SAVE config once, this will add a new boolean value
    (true or false) in Joomla! configuration for using SecurityImages.

 

Download / Details / Keep up to date with the Joomla! 1.5 patches RSS Feed Icon

Category: SecurityImages

Page 1 of 7

Donations

Thank You for supporting my work
Subscribe to me on YouTube

Latest Articles

  • In this series of post I will outline some common techniques to help Joomla extensions development. As you know Jooml... ...
  • CedTag  has been updated to version 2.5.3 and correct a lot of bugs and contains some nice features. CedTag is t... ...
  • CedThumbnails has been updated to version 2.5.5 and contains 1 new features for both Joomla 1.7 and Joomla 2.5. For ex... ...
  • CedSmugmug  has been updated to version 2.5.2 and correct some bugs and contains some nice features. CedSmugmug&... ...
  • If you want an extra gigabyte of storage on your Dropbox account, the online cloud service invites you to compete in i... ...

Subscribe

Latest Comments

Popular Posts

rockettheme advertisement

dropbox logo

Help Us & Leave Feedback!

  • Do you have an excellent article idea you would like to read about here? Share it!
  • Do you have some interesting tips how we could improve our site?
  • Something missing here? Help us make this blog a better place, leave feedback!
We would love to hear from you! Be active! Write us now!