News:

Wondering if this will always be free?  See why free is better.

Main Menu

SMF forum url/registration mail link

Started by Dr. Bunsen, July 30, 2012, 03:52:43 AM

Previous topic - Next topic

Dr. Bunsen

Quote from: Dr. Bunsen on August 03, 2012, 03:31:20 AM
Quote from: Arantor on August 02, 2012, 04:20:06 PM
So the settings file is right, as per the screenshot. And it's not in any part of smf_settings or smf_themes? How EXACTLY are you checking that?

I just do: "SELECT * FROM [table_name]" and scroll through it

edit: just got this:

but the registration is still:

edit: oops that wasnt supposed to be a quote

Dr. Bunsen

#21
O I think I just solved it, the forum takes the url from ur browser, since I tried it with a proxy, and look at my nice email:


so not from the files, since other people started receiving normal emails too, but when I do it locally, it still gives 192.168.1.20

but is there a way to force it to use evolutionofcraft.tk?

Arantor

I'm still wondering what you've broken in the code because the core remainder code calls the main email template handler, which always substitutes $scripturl in, but $scripturl is based on $boardurl which is set in the Settings.php file.

If you're using the email template editor mod, or pretty URLs, now would be the time to mention this - because I can't reproduce this even using a proxy on any site I operate.

Dr. Bunsen

Quote from: Arantor on August 03, 2012, 07:59:53 AM
I'm still wondering what you've broken in the code because the core remainder code calls the main email template handler, which always substitutes $scripturl in, but $scripturl is based on $boardurl which is set in the Settings.php file.

If you're using the email template editor mod, or pretty URLs, now would be the time to mention this - because I can't reproduce this even using a proxy on any site I operate.

I tolf you before, the only mod I use is bad behaviour, and I didnt edit anything, its just a fresh smf 2.0.2 install.
But it just grabs the url from the browser...

Arantor

And as I'm telling you, there is nowhere in the core SMF where it does that.

Dr. Bunsen

Quote from: Arantor on August 03, 2012, 02:45:00 PM
And as I'm telling you, there is nowhere in the core SMF where it does that.

And I am telling you, I see it happening right here. I tested it, it really does.

Arantor

And yet I cannot reproduce it on any of the forums I run - even with proxies and all kinds of URL spoofing.

If it used the supplied URL that would actually be a very nasty form of vulnerability - and since it's all done in the same place in the same exact code (loadEmailTemplate() in Subs-Post.php), every single email should be broken and yet it's not.

Dr. Bunsen

Quote from: Arantor on August 04, 2012, 10:48:37 AM
And yet I cannot reproduce it on any of the forums I run - even with proxies and all kinds of URL spoofing.

If it used the supplied URL that would actually be a very nasty form of vulnerability - and since it's all done in the same place in the same exact code (loadEmailTemplate() in Subs-Post.php), every single email should be broken and yet it's not.

well, I didnt adjust a thing, it's just a fresh install, but I just use a proxy when I send an email with an url, since else, there is 192.168.1.20 in it, cuz I cant connect to my own ip(stupid isp).
I find it very strange too, but it just does this....

Dr. Bunsen

Quote from: Arantor on August 04, 2012, 10:48:37 AM
And yet I cannot reproduce it on any of the forums I run - even with proxies and all kinds of URL spoofing.

If it used the supplied URL that would actually be a very nasty form of vulnerability - and since it's all done in the same place in the same exact code (loadEmailTemplate() in Subs-Post.php), every single email should be broken and yet it's not.

sorry for the gravedig

well, when I was making my navbar links dynamic, I found that $scripturl is actually domain atm local ip(so 192.168.1.x) or my ip + /action=?
and then I can use the navbar from inside my network(it shows when hovering 192.168.1.x/action=?) and outside(domain/ip.action=?). The example /action=? is not the exact code, but its highly dynamic........
So i just showed proof the forum actually works that way:

Advertisement: