Alphabetical pagination (ABP2) [Deleted]

[Oblivion Knight]

Your addon exposed to SQL injection. Please make a conversation with me for detail (or you could just look at the error log)

Thanks for the warning. I have temporarily disabled the add-on on my website.

I hope a patch can be released quickly.

 

[Banxix]

Your addon exposed to SQL injection. Please make a conversation with me for detail (or you could just look at the error log)

Tested with my previous SQL and it is fixed.

 

[au lait]

au lait updated Alphabetical pagination (ABP2) with a new update entry:

1.2.4

[fixed] SQL injection

Read the rest of this update entry...

 

[Oblivion Knight]

Thank you for the prompt update.

 

[au lait]

This resource has been removed and is no longer available. The following reason was provided:

Due to health problems, support is no longer possible for the time being.

 

[ibrahim1983]

can I ask you to help to get the latest version Alphabetical pagination (ABP2) 1.2.4

 

[Chad]

can I ask you to help to get the latest version Alphabetical pagination (ABP2) 1.2.4

Same here

 

[au lait]

can I ask you to help to get the latest version Alphabetical pagination (ABP2) 1.2.4

Same here

please write me here ->

https://xenmade.com/forums/your-private-forum.103/

 

[ibrahim1983]

registration does not work, your site is closed

 

[au lait]

au lait updated Alphabetical pagination (ABP2) with a new update entry:

1.2.5

[info] Freeversion
[info] XF2.x compatible

Read the rest of this update entry...

 

[imno007]

@au lait @Xon

Thanks for reviving this!

Just wanted to note, though, that there's a conflict between this and Xon's Optimized List Queries addon:


XF\Db\Exception: MySQL statement prepare error [1052]: Column 'lft' in where clause is ambiguous in src/XF/Db/AbstractStatement.php at line 228

2. XF\Db\AbstractStatement->getException() in src/XF/Db/Mysqli/Statement.php at line 196
4. XF\Db\Mysqli\Statement->getException() in src/XF/Db/Mysqli/Statement.php at line 39
6. XF\Db\Mysqli\Statement->prepare() in src/XF/Db/Mysqli/Statement.php at line 54
8. XF\Db\Mysqli\Statement->execute() in src/XF/Db/AbstractAdapter.php at line 94
10. XF\Db\AbstractAdapter->query() in src/XF/Mvc/Entity/Finder.php at line 1379
12. XF\Mvc\Entity\Finder->fetch() in src/addons/SV/OptimizedListQueries/XF/Repository/Node.php at line 63
14. SV\OptimizedListQueries\XF\Repository\Node->getNodeList() in src/addons/SV/AggregatingForums/XF/Repository/Node.php at line 44
16. SV\AggregatingForums\XF\Repository\Node->getAggregableNodeList() in src/addons/SV/AggregatingForums/XF/Repository/Node.php at line 74
18. SV\AggregatingForums\XF\Repository\Node->getNodeList() in src/XF/Pub/Controller/Forum.php at line 253
20. XF\Pub\Controller\Forum->actionForum() in src/addons/AVForums/PrefixEssentials/XF/Pub/Controller/Forum.php at line 42
22. AVForums\PrefixEssentials\XF\Pub\Controller\Forum->actionForum() in src/addons/xenMade/STFRT/XF/Pub/Controller/Forum.php at line 55
24. xenMade\STFRT\XF\Pub\Controller\Forum->actionForum() in src/addons/xenMade/ABP/XF/Pub/Controller/Forum.php at line 33
26. xenMade\ABP\XF\Pub\Controller\Forum->actionForum() in src/addons/SV/AggregatingForums/XF/Pub/Controller/Forum.php at line 34
28. SV\AggregatingForums\XF\Pub\Controller\Forum->actionForum() in src/addons/SV/OptimizedListQueries/XF/Pub/Controller/Forum.php at line 31
30. SV\OptimizedListQueries\XF\Pub\Controller\Forum->actionForum() in src/XF/Mvc/Dispatcher.php at line 350
32. XF\Mvc\Dispatcher->dispatchClass() in src/XF/Mvc/Dispatcher.php at line 257
34. XF\Mvc\Dispatcher->dispatchFromMatch() in src/XF/Mvc/Dispatcher.php at line 113
36. XF\Mvc\Dispatcher->dispatchLoop() in src/XF/Mvc/Dispatcher.php at line 55
38. XF\Mvc\Dispatcher->run() in src/XF/App.php at line 2326
40. XF\App->run() in src/XF.php at line 488
42. XF::runApp() in index.php at line 20

 

[Xon]

Try disabling "Fetch all the nodes at once instead of per-type" to see if that helps. It sounds like the lft field is being referred to without a scoping table reference, this will cause issues if joining to a table with a column with that name.

This line;

$where[] = ' (lft > ' . $node['lft'] . ') AND (rgt < ' . $node['rgt'] . ') OR ' . 'xf_node.node_id = ' . $node['node_id'];

Should be;

$lftColumn = $data->columnSqlName('lft');
$rgtColumn = $data->columnSqlName('rgt');
$where[] = ' ('.$lftColumn .' > ' . $node['lft'] . ') AND ('.$rgtColumn  .'< ' . $node['rgt'] . ') OR ' . 'xf_node.node_id = ' . $node['node_id'];

The add-on should use columnSqlName to correctly get the table/column name.

 

[au lait]

I know I have already corrected it! and sent the user a new version. Thank you Xon. As always very helpful

 

[imno007]

Thank you both. Disabling that one option didn't make a difference but the patched version fixed it.

 

[au lait]

au lait updated Alphabetical pagination (ABP2) with a new update entry:

1.2.6

[fixed] Column 'lft' in where clause is ambiguous

Read the rest of this update entry...

 

[Maestro2k5]

The selection does not work in this smartphone view. the selection has no function

 

[Oblivion Knight]

@Maestro2k5 it works fine for me.. Stupid question, but did you click "Weiter" after selecting the letter?

 

[au lait]

XF2.2.3 no problems


View attachment I3OowmlcTR.mp4

 

[Maestro2k5]

@Maestro2k5 it works fine for me.. Stupid question, but did you click "Weiter" after selecting the letter?

Yes, after Klick in Android Chrome selection has no function

 

[au lait]

Yes, after Klick in Android Chrome selection has no function

I cannot confirm this with my Chrome (mobile and desktop).