Posts Tagged 'securityimages5'

Nasty Bug in SecurityImages 5.1.2

Details

Category: SecurityImages

Published on Wednesday, 25 May 2011 20:23

Written by Administrator

Hits: 2547

Thanks to Margus Pala, a security Flaw has been reported and corrected in SecurityImages version 5.1.2 and previous

The flaw is of moderate level, in register forms, spammers are able to register without solving the Captcha!

• It affect only SecurityImages 5.x for Joomla! 1.5
• SecurityImages 6.x for Joomla! 1.6 is not affected

In order to resolve this issue, you don’t have to install any new version of SecurityImages, you must either

• Update your blog with the right version of the joomla! patches, the all end with Joomla_1.5.x-Stable-Full_PackageForSecurityImages5.y.z_v01.03.00

OR

• Edit the file components\com_user\controller.php and remove the line 274 ($this->register())

if ($useSecurityImagesInRegister && !$this->checkSecurityImagesCaptcha()) {
  JError::raiseWarning('', JText::_('SECURITYIMAGES REJECT USER ENTRY'));  
  $this->register();
  return false;
}

These patches versions have the flaw

04/12/2008  Joomla_1.5.1-Stable-Full_PackageForSecurityImages5.0.0.zip
05/01/2008  Joomla_1.5.2-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
05/01/2008  Joomla_1.5.3-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
07/10/2008  Joomla_1.5.4-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
08/03/2008  Joomla_1.5.5-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
08/03/2008  Joomla_1.5.6-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
08/19/2008  Joomla_1.5.6-Stable-Full_PackageForSecurityImages5.1.0_v01.00.00.zip
09/13/2008  Joomla_1.5.7-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
09/20/2008  Joomla_1.5.7-Stable-Full_PackageForSecurityImages5.1.0_v01.00.00.zip
11/11/2008  Joomla_1.5.8-Stable-Full_PackageForSecurityImages5.0.0_v01.00.00.zip
01/19/2009  Joomla_1.5.8-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
01/19/2009  Joomla_1.5.9-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
03/28/2009  Joomla_1.5.10-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
06/03/2009  Joomla_1.5.11-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip
07/04/2009  Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
07/26/2009  Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
07/26/2009  Joomla_1.5.14-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip
09/11/2009  Joomla_1.5.14-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
11/09/2009  Joomla_1.5.15-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
04/24/2010  Joomla_1.5.16-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
04/24/2010  Joomla_1.5.17-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
09/12/2010  Joomla_1.5.18-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
04/24/2010  Joomla_1.5.20-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
01/09/2011  Joomla_1.5.21-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
01/09/2011  Joomla_1.5.22-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip
01/09/2011  Joomla_1.5.23-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip

You can download the updated versions in HERE or search the download section, type 1.5.23 for the patches for 1.5.23 for example

Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip

Details

Category: SecurityImages

Published on Sunday, 26 July 2009 00:00

Written by Administrator

Hits: 10961

Only for SecurityImages 5.1.x and Joomla! 1.5.13

Allow login views, login modules, register, lost password, lost user account and contact section to be
protected by SecurityImages

• Are for Joomla! 1.5.13 only and SecurityImages 5.1.x or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.13-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip (33kB) and
  overwrite file on your server
• Go to Joomla! control panel and HIT at least SAVE configuration once, this will add a new boolean value
  (true or false) in Joomla! configuration for using SecurityImages.

• Download / Details
• Keep up to date with the Joomla! 1.5 patches RSS
• How to install documentation

Joomla_1.5.23-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip

Details

Category: Joomla 1.5

Published on Saturday, 16 April 2011 21:19

Written by Administrator

Hits: 3343

Only for SecurityImages 5.1.x and Joomla! 1.5.23
Allow login views, login modules, register, lost password, lost user account and contact section to be
protected by SecurityImages

• Are for Joomla! 1.5.23 only and SecurityImages 5.1.x or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.23-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip (33kB) and
  overwrite file on your server with the zip package usign FTP/SCP
• Go to Joomla! control panel and HIT at least SAVE configuration once, this will add a new boolean value
  (true or false) in Joomla! configuration for using SecurityImages.

How to install documentation

Download Joomla_1.5.23-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip

Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip

Details

Category: SecurityImages

Published on Saturday, 04 July 2009 00:00

Written by Administrator

Hits: 12519

Only for SecurityImages 5.1.x and Joomla! 1.5.12

Allow login views, login modules, register, lost password, lost user account and contact section to be
protected by SecurityImages

• Are for Joomla! 1.5.12 only and SecurityImages 5.1.x or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.12-Stable-Full_PackageForSecurityImages5.1.x_v01.01.00.zip (33kB) and
  overwrite file on your server
• Go to Joomla! control panel and HIT at least SAVE config once, this will add a new boolean value
  (true or false) in Joomla! configuration for using SecurityImages.

Download / Details / Keep up to date with the Joomla! 1.5 patches RSS

Joomla_1.5.22-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip

Details

Category: Joomla 1.5

Published on Saturday, 16 April 2011 21:17

Written by Administrator

Hits: 3083

Only for SecurityImages 5.1.x and Joomla! 1.5.22
Allow login views, login modules, register, lost password, lost user account and contact section to be
protected by SecurityImages

• Are for Joomla! 1.5.22 only and SecurityImages 5.1.x or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.22-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip (33kB) and
  overwrite file on your server with the zip package usign FTP/SCP
• Go to Joomla! control panel and HIT at least SAVE configuration once, this will add a new boolean value
  (true or false) in Joomla! configuration for using SecurityImages.

How to install documentation

Download Joomla_1.5.22-Stable-Full_PackageForSecurityImages5.1.x_v01.02.00.zip

SecurityImages 5.1.2 available

Details

Category: SecurityImages

Published on Saturday, 04 July 2009 00:00

Written by Administrator

Hits: 13028

This version should improve installations on some host, where the plugin securityimages.php did not always install properly. The reason behind is that I did add falsely an additional file index.html in plugin.zip. This may lead to permissions issues during installation. SecurityImages 5.1.2 do not contains any other changes, so If you’re happily running SecurityImages 5.1.1, no need to upgrade!

Download
Details

Joomla_1.5.11-Stable-Full_PackageForSecurityImages5.1.1.zip

Details

Category: SecurityImages

Published on Wednesday, 03 June 2009 00:00

Written by Administrator

Hits: 12507

The Joomla! community is pleased to announce the immediate availability of Joomla! 1.5.11

Since Joomla 1.5.11 is released...Here are the new patches for SecurityImages 5.1.1 AND Joomla! 1.5.11

• Allow login views, login modules, register, lost password, lost user account and contact section to be protected by SecurityImages
• Are for Joomla! 1.5.11 only and SecurityImages 5.1.0 or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.11-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip (33kB) and
  overwrite file on your server
• Go to Joomla! control panel and HIT at least SAVE configuration once, this will add a new Boolean value
  (true or false) in Joomla! configuration for using SecurityImages. (do nothing if you were previously using patches)

DOWNLOAD HERE and stay up to date with the Joomla! 1.5 patches RSS feed

Joomla_1.5.10-Stable-Full_PackageForSecurityImages5.1.1.zip

Details

Category: SecurityImages

Published on Saturday, 28 March 2009 00:00

Written by Administrator

Hits: 12700

The Joomla! community is pleased to announce the immediate availability of Joomla! 1.5.10

Since Joomla 1.5.10 is released...Here are the new patches for SecurityImages 5.1.1

• Allow login views, login modules, register, lost password, lost user account and contact section to be
  protected by SecurityImages
• Are for Joomla! 1.5.10 only and SecurityImages 5.1.0 or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.10-Stable-Full_PackageForSecurityImages5.1.0_v01.01.00.zip (33kB) and
  overwrite file on your server
• Go to Joomla! control panel and HIT at least SAVE configuration once, this will add a new boolean value
  (true or false) in Joomla! configuration for using SecurityImages

DOWNLOAD HERE and stay up to date with the Joomla! 1.5 patches RSS feed 

SecurityImages 5.2.0 in active development

Details

Category: SecurityImages

Published on Tuesday, 10 February 2009 00:00

Written by Administrator

Hits: 13044

Following the Preview of SecurityImages 5.2.0, I am currently developing a proof of concept using the Ajax library JQUERY 

jQuery is a fast and concise JavaScript Library that simplifies HTML document traversing, event handling, animating, and Ajax interactions for rapid web development. jQuery is designed to change the way that you write JavaScript.

I want to allow generated captcha to be checked asynchronously without needing submit of whole page. This is a major complain since the beginning of SecurityImages, as currently users lost their entries in the form in case the captcha challenge get refused.

A lot more check are also done NOW in the Diagnostics page:

• Checking existence of system plugin,
• Ability to display the error message if any of each plugin in one click
• Reload count configured will be displayed,
• A way to create automated error reporting (cut and paste) for better support in my forums

AND

A new API inspired from recaptcha.net that will allow me to integrate new system in future without being limited to an image (why not having a flash or video in future?). This API fully use the Joomla! event system so less code to write for all 3rd party developers and less dependencies.

Stay tuned!

Joomla_1.5.9-Stable-Full_PackageForSecurityImages5.1.0.zip

Details

Category: SecurityImages

Published on Monday, 12 January 2009 00:00

Written by Administrator

Hits: 14733

The Joomla! community is pleased to announce the immediate availability of Joomla! 1.5.9

Since Joomla 1.5.9 is released...Here are the new patches for SecurityImages 5.1.0

• Allow login views, login modules, register, lost password, lost user account and contact section to be
  protected by SecurityImages
• Are for Joomla! 1.5.9 only and SecurityImages 5.1.0 or later
• 14 files has been altered, mostly views, and com_contact/com_user controller, click on picture below
  for more details
• Download file Joomla_1.5.9-Stable-Full_PackageForSecurityImages5.1.0_v01.00.00.zip (33kB) and
  overwrite file on your server
• Go to Joomla! control panel and HIT at least SAVE config once, this will add a new boolean value
  (true or false) in Joomla! configuration for using SecurityImages