Feed on Feeds Hackers Google Group

Re: Issue 69, 70 and 71 in feed-on-feeds: XSS and SQL Security Flaws

steveminuti...@gmail.com (Stephen Minutillo) — Sun, 22 May 2011 06:10:23 UT

Thanks for finding and patching these XSS and privilege-escalation
holes. For issue 70 I am going to use your patch as is, and for issue
69 and 71 I will solve the problem by using htmlentities() at the time
the content is output.

Steve

Issue 69, 70 and 71 in feed-on-feeds: XSS and SQL Security Flaws

dmazz...@gmail.com (David Mazza) — Wed, 18 May 2011 18:33:19 UT

All patches are attached to the bugs reports in Google Code.
I'm combining all three bugs into this one email to lighten the load on
everybody's inbox.
[link]
*What steps will reproduce the problem?*
1. If a user is logged into the system, an attacker can exploit add.php by sending the user a link with a script in the GET field.

Re: Issue 40 in feed-on-feeds: No "mark as read" option for secondary accounts

codesite-nore...@google.com — Tue, 02 Mar 2010 16:19:42 UT

Comment #2 on issue 40 by ebassett: No "mark as read" option for secondary
accounts
[link]
enable hotkey navigation, then you should be able to use the following keys
to do
what you want:
ctrl-click: select post
N: select/scroll to next post
J: mark seleted post as read and select/scroll to next post

Re: Issue 65 in feed-on-feeds: Feed not updating

codesite-nore...@google.com — Tue, 02 Mar 2010 16:15:37 UT

Comment #1 on issue 65 by ebassett: Feed not updating
[link]
Have you checked to make sure the RSS file on the server is valid?

Issue 67 in feed-on-feeds: Wordpress plug d

codesite-nore...@google.com — Tue, 02 Mar 2010 16:11:33 UT

Status: New
Owner: ----
New issue 67 by ebassett: Wordpress plug d
[link]
What steps will reproduce the problem?
1. Enable Wordpress plugin
2. Reload settings page, add wordpress url
3. view feeds, click 'blog this'
4. login to your wordpress and realize the text from what you wanted to

Issue 66 in feed-on-feeds: Purging not working,

codesite-nore...@google.com — Wed, 17 Feb 2010 08:29:06 UT

Status: New
Owner: ----
New issue 66 by pe...@milneandfletch.co.uk: Purging not working,
[link]
Hi,
I've set purging to 1 day, so in my view the db should be emptied everyday
other than what is unread but this is not happening?
Anu suggestions? I have quite-update running every 15 minutes as well,

Issue 65 in feed-on-feeds: Feed not updating

codesite-nore...@google.com — Thu, 31 Dec 2009 16:43:13 UT

Status: New
Owner: ----
New issue 65 by Gabbello: Feed not updating
[link]
I have the same feed on two different servers (different hosting providers,
both linux, both same fof ver., same setup). At some point on one server
the feed stopped updating. If I try to manually update it it says "Update

Issue 64 in feed-on-feeds: currval does not exist

codesite-nore...@google.com — Wed, 18 Nov 2009 14:01:28 UT

Status: New
Owner: ----

New issue 64 by scvinodk...@gmail.com: currval does not exist
[link]

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?

Please use labels and text to provide additional information.

Wher are auto-tags stored?

dejan...@gmail.com (detep) — Sun, 25 Oct 2009 16:05:40 UT

Why is application not using item tags defined by user with auto-tag
processing?

Issue 63 in feed-on-feeds: Add admin account with password

codesite-nore...@google.com — Wed, 14 Oct 2009 17:50:59 UT

Status: New
Owner: ----
New issue 63 by hemilsheth: Add admin account with password
[link]
What steps will reproduce the problem?
1. When I browse the url for feed on feed it directly goes into screen
where any one can add new feeds or delete it
What is the expected output? What do you see instead?

Issue 30 in feed-on-feeds: Database optimalisation

codesite-nore...@google.com — Fri, 09 Oct 2009 14:10:59 UT

Comment #3 on issue 30 by scvinodkumar.php: Database optimalisation
[link]
Hi shaiman..., could you please tell me how to optimize the database, i
have greater
than 7 lakhs items in the database and it takes me long time to update and
display
the items.

Issue 62 in feed-on-feeds: Dont work in Internet Explorer 6

codesite-nore...@google.com — Mon, 27 Jul 2009 11:37:20 UT

Status: New
Owner: ----
New issue 62 by benitojcv: Dont work in Internet Explorer 6
[link]
What steps will reproduce the problem?
1. Open with Internet Explorer 6.0
2.
3.
What is the expected output? What do you see instead?
showing correctly.
What version of the product are you using? On what operating system?

Issue 61 in feed-on-feeds: LaunchDaemon for MacOS X users (to be used instead of cron entries)

codesite-nore...@google.com — Mon, 20 Jul 2009 20:55:00 UT

Status: New
Owner: ----
New issue 61 by doenietzomoeilijk: LaunchDaemon for MacOS X users (to be
used instead of cron entries)
[link]
MacOS X uses launchd rather than cron. It's still possible to use the
latter, but you're not really
supposed to.

Issue 60 in feed-on-feeds: [plugin] Bookmark to Scuttle

codesite-nore...@google.com — Mon, 20 Jul 2009 19:57:15 UT

Status: New
Owner: ----
New issue 60 by doenietzomoeilijk: [plugin] Bookmark to Scuttle
[link]
Hi,
I came back to FoF after a very, very long time, and I like what I see.
More so than before, this
might be the software that enables me to ditch Google Reader. Great work,

Issue 59 in feed-on-feeds: Missing server port in shared feed link

codesite-nore...@google.com — Mon, 22 Jun 2009 11:24:40 UT

Status: New
Owner: ----
New issue 59 by dangquangvu: Missing server port in shared feed link
[link]
In case server port isn't 80, shared feed link is wrong.
Modification in shared.php
$server_port = $_SERVER['SERVER_PORT'] != 80 ? ':' .
$_SERVER['SERVER_PORT'] : '';