Help with navigation:transmenu and security. - Joomla! Forum - community, help and support
i have had problem , didn't know root until now.......
problem:
the transmenu changing url of items in "submenu" causing security problem. (i false positive)
details:
it changes “href” submenu ………..
1. http://localhost/joomla/index.php?optio ... view&id=14&item id=27
to this…..
2. http://localhost/joomla/index.php?optio ... iew&id=14&item id=27
the second 1 gives false error says…
you not authorized view resource.
you need login.
i have highlighted in red has gotten changed. makes sense why 1 error message.
appreciated.
regards,
ira bliss (jib3)
p.s. found place in code think it's happening. (i don't know if right or how fix if am.)
transmenu.php
??
------------------ snip----------------------------
switch ($mitem->type) {
case 'separator':
case 'component_item_link':
break;
case 'content_item_link':
$temp = split("&task=view&id=", $mitem->link);
$mitem->link .= '&item id='. $mainframe->getitemid($temp[1]);
break;
case 'url':
if ( eregi( 'index.php\?', $mitem->link ) ) {
if ( !eregi( 'itemid=', $mitem->link ) ) {
$mitem->link .= '&item id='. $mitem->id;
}
}
break;
case 'content_typed':
default:
$mitem->link .= '&item id='. $mitem->id;
break;
------------------ snip----------------------------
problem:
the transmenu changing url of items in "submenu" causing security problem. (i false positive)
details:
it changes “href” submenu ………..
1. http://localhost/joomla/index.php?optio ... view&id=14&item id=27
to this…..
2. http://localhost/joomla/index.php?optio ... iew&id=14&item id=27
the second 1 gives false error says…
you not authorized view resource.
you need login.
i have highlighted in red has gotten changed. makes sense why 1 error message.
appreciated.
regards,
ira bliss (jib3)
p.s. found place in code think it's happening. (i don't know if right or how fix if am.)
transmenu.php
??
------------------ snip----------------------------
switch ($mitem->type) {
case 'separator':
case 'component_item_link':
break;
case 'content_item_link':
$temp = split("&task=view&id=", $mitem->link);
$mitem->link .= '&item id='. $mainframe->getitemid($temp[1]);
break;
case 'url':
if ( eregi( 'index.php\?', $mitem->link ) ) {
if ( !eregi( 'itemid=', $mitem->link ) ) {
$mitem->link .= '&item id='. $mitem->id;
}
}
break;
case 'content_typed':
default:
$mitem->link .= '&item id='. $mitem->id;
break;
------------------ snip----------------------------
ok, still trying. anyone? weird thing problem if "logged in site, links works expected.
meaning link works:
2. http://localhost/joomla/index.php?optio ... iew&id=14&item id=27
even extraneous code. why this? because i'm logged in, don't error? if appreciate feedback.
regards,
ira
meaning link works:
2. http://localhost/joomla/index.php?optio ... iew&id=14&item id=27
even extraneous code. why this? because i'm logged in, don't error? if appreciate feedback.
regards,
ira
Comments
Post a Comment