Thank you very much! The errors stoped so I think its working.

Hiroko

I am receiving errors from the Newsletter log cleanup.

The server cannot be upgraded for now, and I need to use CMSB v3.61.

The Newsletter Builder is v3.06.

Activity: Newsletter Mailer Log Cleanup

Summary: Error

Completed: 0

Function: nlb_mailer_log_cleanup

Output:
MySQL Error: Unknown column 'function' in 'where clause' in /home/xxx.com/public_html/cmsb/plugins/newsletterBuilder3_06/newsletterBuilder.php on line 550

Above refers to this part on the newsletterBuilder.php, but it seem like it is not different from the other older versions or the newest version.

// erase successful log messages with no output that are 10 minutes old or more
function nlb_mailer_log_cleanup() {

$deleteWhere = "`function` IN('nlb_mailer','nlb_mailer_log_cleanup') AND `output` = '' AND `completed` = 1 AND `createdDate` <= (NOW() - INTERVAL 10 MINUTE)";
mysql_delete('_cron_log', null, $deleteWhere);

}

What can I do to fix the error?

Thank you in advance.

Hiroko

I just started a new site using the latest CMSB, setting the cron job on my server.

Fatal error: Uncaught TypeError: is_dir(): Argument #1 ($filename) must be of type string, null given in /home/users/0/xxx/web/maris/cmsb/lib/Server.php:188

Somehow, it was sending me error mails, so I tried running manualy.

The last line seems to be an error.

cron_dispatcher_process(): Argument #2 ($cronLastRunTime) must be of type int, string given, called in /home/users/0/xxx/web/maris/cmsb/cron.php on line 115 in /home/users/0/xxx/web/maris/cmsb/cron.php on line 115

What can I do for this? 

Thank you,

HIroko

I am receiving error report email from my CMSB every hour.

One or more php errors have been reported on: www.tokyoartantiques.com

Check the error log for complete list and more details:
https://www.tokyoartantiques.com/cmsAdmin/admin.php?menu=_error_log

Latest errors:

*Note: Email notifications of new errors are only sent once an hour.

Sometimes there is an error, but most of the time there are no errors logged and I can't find out why the email were sent.

My other CMSBs does not send error report email every hour unless errors are actually logged.

I thought maybe it has something to do with Newsletter Builder plugin?

Does anyone know?

I am using v3.58.

Thank you,

Hiroko

Thank you for the reply.

I was able to export the blog data from CMSB, so will try looking for a CSV plugin.

>Otherwise, it's just a process of mapping the data from one database structure to the other.

Ok, I understant. 

If I can't import the data correctly with the WP plugin, I will ask for help here.

Thanks!

Hiroko

Is it possible?

If it is, how can this be done? Could it be done by the paid support?

Thank you,

Hiroko

I finally found out why my "Get options from MYSQL query" setting couldn't be saved.

The server had a WAF setting (Web Application Firewall) that detects access to SQL statements. I turned it off, and I was able to save.

There was also a WAF setting that detects 'kill, ftp, mail, ping, ls' commands that will case 501 error on saving record for Newsletter Builder.

Sorry if I took your time. 

In case someone has the same problem, you might want to check the server settings.

Best,

Hiroko

I might be missing something, but I have a list field that I have been doing the same thing in older versions that don't seem to work now.

I'm using "Get options from MYSQL query" and when I use the WHERE query, I get "There was an error sending the request! (403 error)" and cannot save.

SELECT num, name
FROM `<?php echo $TABLE_PREFIX ?>json_ld_properties`
WHERE markup_type = '<?php echo $ESCAPED_FILTER_VALUE;?>type2'

When I get rid of the WHERE, it works.

Is there any changes I should make?

Thanks in advance,

Hiroko

Thanks! It works great now!

Hiroko

I just uploaded this new version on a new server for a new project. (not as an update)

When I make a category menu, I am getting an error when I save (a new or existing record). I'm uploading the screenshot to this post.

This doesn't happen on the multi or single record. Can you look through this?

Thank you.

Hiroko

ps. PHP ver. is 7.4.4, MySQL ver. is 5.7.31

Thanks for the help.

I tried following Jerry's advice but couldn't figure out how to apply it to record view, not images, and have been working around, but suddenly, the error stopped when I typed in the first code again.

I guess I had something wrong somewhere.

Sorry for the fuss and thank you!

Best,

Hiroko

I am trying to use end($myRecords) to get the 'num' of the last record listed in a viewer.

The result is fine, but I have a PHP warning that says 

"Warning: Use of undefined constant     - assumed '   ' (this will throw an Error in a future version of PHP)"

I just want to get rid of the comma on the last item.

<?php // get last record num
	$lastRecord = end($itemRecords);
	$lastRecordNum = $lastRecord['num'];
?>
<?php foreach ($itemRecords as $record): ?>
some codes
<?php if ($lastRecordNum != $record['num']): ?>,<?php endif ?>
<?php endforeach ?>

Can someone tell me why I am getting this warning and how I could fix it?

Thank you,

Hiroko

Thank you for your help.

This is the code that was added to my .htaccess file.

# Block Open-Redirect
RewriteCond %{QUERY_STRING} (^|&)l=([^&]+)($|&)
RewriteRule .* -[E=X_QUERY_REDIRECT:%2]RewriteCond %{ENV:X_QUERY_REDIRECT} !^$
RewriteCond %{ENV:X_QUERY_REDIRECT} !^http(s)?://(www\.)?mysite.com.*
RewriteRule .* -[F]

The tracking link is a nice feature, but I guess I will use the code you have suggested.

Thanks!

Best,

Hiroko

Thanks for the response.

The manage page was just about the same as the PHP generator with some styles. And yes, I should have used ReCaptcha in the first place and that was not smart. I had someone to look through my server and there was no trace of falsification, which I was very relieved.

So, as you mentioned about the Cross-Site Scripting attacks, this issue that anyone can make a link by using your domain plus the "l" parameter, could be a vulnerability to our sites. I guess the first step is to not let them know about the "l" parameter and maybe that was possible by using the ReCaptcha. When the spam registered the newsletter, they received the confirmation mail with links where the "l" parameter is used. (or is it popular to use l parameter?)

I had the .htaccess file rewritten so that any external site on the  "l" parameter will be rejected. This may cause effect on some function, and it is a temporary measure, but for now, everything on my site seems ok.

In case anyone in the future experience the same issue, I can share the code, but I can't guarantee.

Best,

Hiroko

One of my client's site's Newsletter builder manage page has been hacked (not sure what exactly happened).

There was a number of spam registration on the newsletter and I unconfirmed those registerations.

Yesturday, the server company contacted me that the manage page is being used to transfer URL to a fraudulent website

I deleted the manage page, but I would like to know if there is any way to protect my files from something like this.

The url that the server company sent me was like this https://www.xxx.com/manage.php?l=http://fraudulentsite.com

there is an URL attached after the question mark.

I looked into the file and other files, but couldn't find anything suspicious.

If anyone have information about something like this, please let me know.

Thank you,

Hiroko

Thank you for the information!

Your CMSB Cookbook has always been a great help for me.

So if the server company cannot upgrade php to 5.6, then I'll just have to make a maintenance index page and work on the dramatic update.

Thank you again. I'll talk to the server company.

Hiroko

One of my client is using a server with php 5.3 and the server company will be updating it to 7.2 next month.

The CMSB I used is ver. 2.65 but the server will be updated to 7.2 from 5.3 so I need to update it before the php update is done or the website will not work.

Would anyone know which ver of CMSB works on php 7.2 and still be working with php 5.3?

If so, can I download that ver.?

I've tried CMSB ver. 3.05 when I first worked on the website, which didn't work and had to downgrade to 2.65.

Thank you.

Hiroko

Thank you for the update. It works fine now!

Hiroko

Thanks for your reply. I'm very sorry for the late response.

And thank you Helmut for reporting.

This is the error I get (raw log data) when I change to php 7.2.

Array
(
[logType] => runtime
[errno] => 8192
[errstr] => Function create_function() is deprecated
[errfile] => /home/xx.com/public_html/cmsAdmin/plugins/spambotEmailProtector2_01/spambotEmailProtector.php
[errline] => 35
[errcontext] => *** in symbol table field above ***
)

And this is from the Symbol Table

Array
(
[content] => Event Detail
[EMAIL_ONLY] => ([\w\-\.]+@[\w\-\.]+\.[A-Za-z]{2,8})
[mailtoRegexp] => (<[^>]*?['"])mailto:([\w\-\.]+@[\w\-\.]+\.[A-Za-z]{2,8})(['"][^>]*>)
[php_errormsg] => Undefined index: SEP_DISABLED
)

For the Create Record Here Plugin, I think I was wrong about it. I updated php version again to 7.2 for testing and it was working.

Thank you for your help. 

Hiroko

I've noticed that the Create Record Here plugin v1.02 is also not working, meaning the "create here" link doesn't show up on the cms.

I downgraded my server's php version to 7.1 and the spambot email plugin stop getting errors, so the problem seems to be the php version.

Thanks again,

Hiroko

Thanks to all the members for the great update on v3.5!

I just updated my cmsb to v3.5 and updated php to 7.2 on my server. 

One problem for now. I'm getting errors from the spambot email pulgin. 

#0 _errorlog_logErrorRecord() called at [/public_html/cmsb/lib/errorlog_functions.php:64]
#1 _errorlog_catchRuntimeErrors() called at [/public_html/cmsb/plugins/spambotEmailProtector2_01/spambotEmailProtector.php:35]
#2 SEP_replaceEmails() called at [/public_html/index.php:95]

Is there any update I should work on?

Thanks beforehand.

Hiroko

Thank you for your reply and advice!

Hiroko

I have some error logs that I am not familiar and thought maybe it is being hacked. 

Is anyone familiar with this error?

https://www.xxx.com/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form%22

https://www.xxx.com/index.php?option=com_b2jcontact&view=loader&type=uploader&owner=component&bid=1&id=138&Itemid=138&qqfile=/../../izoc.php

I am thinking of purchasing the plugin 'Exploit scanner', but it hasn't been updated since 2014.

Will it still be useful?

Thanks for the reply and sorry for the late response.

I couldn't figure out how to get the related records from a multi value field for a while, but looking through the forum, I am finally getting the result I need.

I tried some options, and this post seemed to fit:

https://www.interactivetools.com/forum/forum-posts.php?Display-select-uploads-from-one-category-on-another-category-page-using-pulldown-multi-value-list-81068

In my case the code became like this

if(is_array(@$detailRecord['this_artist:values'])){
    $arrayCounter = count($detailRecord['this_artist:values']);
    foreach($detailRecord['this_artist:values'] as $key => $filterItem){
        $searchString .= "this_artist LIKE '%\t$filterItem\t%'";
        if(($key+1) != $arrayCounter){
            $searchString .= " OR ";
        }
    }  
}


this worked except the viewer shows all records when there is nothing selected on the multi value.

So, I used a non-existing num to avoid it. ( I am sure there is a better solution to this )

$searchString = '';
if(!@$detailRecord['this_artist']){
    $searchString .= "this_artist LIKE '%\t0\t%'";
}
if(is_array(@$detailRecord['this_artist:values'])){
    $arrayCounter = count($detailRecord['this_artist:values']);
    foreach($detailRecord['this_artist:values'] as $key => $filterItem){
        $searchString .= "this_artist LIKE '%\t$filterItem\t%'";
        if(($key+1) != $arrayCounter){
            $searchString .= " OR ";
        }
    }  
}

Will this cause any problem?

I have an exhibition detail viewer page where the participating artists are listed. In this page, I have a list of related exhibition but I am having a problem with duplicate records listed when the artists are participating in the same exhibitions.

This is the listing part of the detail page.

<!--Related exhibitions-->
        <div class="l-column l-row u-paddingTop--half">
            <?php $fieldValues = explode("\t",trim($detailRecord['this_artist'],"\t")); ?>
            <?php foreach($fieldValues as $artistNum): ?>
            <?php foreach ($eventRecords as $record): ?>
            <?php $fieldValues2 = explode("\t",trim($record['this_artist'],"\t")); ?>
            <?php foreach($fieldValues2 as $artistNum2): ?>
            <?php if ($artistNum2 == $artistNum && ($artistNum > 0)): ?>
            <div class="EntryPanel l-flexAuto-4column">
                <div class="EntryPanel--vertical">
                    <a href="/en/<?php echo $record['permalink'] ?>/" title="<?php echo $record['title'] ?>">
                        <div class="EntryPanel__sub EntryPanel__sub--medium imgLiquidFill imgLiquid">
                            <?php foreach ($record['image'] as $index => $upload): ?>
                            <?php if ($index >= 1) { continue; } // limit uploads shown ?>
                            <img src="<?php echo htmlencode($upload['thumbUrlPath2']) ?>" alt="<?php echo $record['num'] ?><?php echo $record['title'] ?>"/>
                            <?php endforeach ?>
                        </div>
                    </a>
                    <div class="EntryPanel__main">
                        <a href="/en/<?php echo $record['permalink'] ?>/" title="<?php echo $record['title'] ?>">
                            <h3 class="EntryPanel__head">
                                <?php echo $record['title'] ?>
                            </h3>
                        </a>
                    </div>
                </div>
            </div>
            <?php endif ?>
            <?php endforeach ?>
            <?php endforeach ?>
            <?php endforeach ?>
            <!--/Related Exhibitions-->

Is there a way to skip the same records?

This is the example of the page. The list is at the bottom page.

Thank you in advance.

Hiroko