Thanks Greg

If I display $CURRENT_USER['position"], the value is "Director".  It shouldn't be.

# CMS PHP Config Files
# --------------------------------------------------------------------------------------------
# These config files attempt to reset PHP and Apache settings to standard values and turn off
# deprecated or problematic features that would otherwise cause errors or problems.
#
# NOTE: These files aren't supported on all servers, but on many they will prevent problems.
# However, they are OPTIONAL and you can safely remove these files if needed.
# --------------------------------------------------------------------------------------------
# .htaccess - For Apache, Apache PHP module and IIS with .htaccess emulator: http://php.net/configuration.changes
# .user.ini - For servers running PHP in CGI/FastCGI mode: http://php.net/configuration.file.per-user
# php.ini   - For servers that support custom php.ini files: http://php.net/configuration.file
# --------------------------------------------------------------------------------------------
# *** IMPORTANT!!! If you make any changes to this file save a backup copy as <filename>.backup
# so you have a backup in case your changes get overwritten next time you upgrade.

# .htaccess settings
# --------------------------------------------------------------------------------------------
# Docs: http://php.net/configuration.changes
# Docs: http://php.net/manual/en/ini.php

# Apache: disable directory browsing
Options -Indexes

# Apache: disable mod_security (some of the admin menus allow you to define SQL which mod_security detects and then denied access to)
<IfModule mod_security.c>
  SecFilterEngine Off
  SecFilterScanPOST Off
</IfModule>

# Apache: disable mod_gzip for cms admin folder (tinymce gzips javascript and sometimes things get double encoded causing errors)
<IfModule mod_gzip.c>
  mod_gzip_on No
</IfModule>

# Apache: Fix issue where some servers send wrong content-type and FireFox won't load stylesheets
<ifModule mod_mime.c>
  AddType text/css .css
</ifModule>

# PHP: turn off deprecated PHP features and increase max upload size allowed
<IfModule mod_php5.c>
  php_value date.timezone UTC
  #php_value disable_functions none # Entry can only be set in php.ini or httpd.conf
  php_value max_input_vars 2000
  php_value open_basedir none
  php_value post_max_size 101M
  php_value upload_max_filesize 101M
  # php_flag zlib.output_compression Off
</IfModule>

# Identify loaded modules
<IfModule mod_env.c>
  SetEnv CMSB_APACHE_HTACCESS 1
  SetEnv CMSB_MOD_ENV 1
  <IfModule mod_php5.c>
    SetEnv CMSB_MOD_PHP5 1
  </IfModule>
  <IfModule mod_fcgid.c>
    SetEnv CMSB_MOD_FCGID 1
  </IfModule>  
  <IfModule mod_suphp.c>
    SetEnv CMSB_MOD_SUPHP 1
    #suPHP_Engine on
    #suPHP_ConfigPath /full/path/to/folder/with/php.ini/in/it
  </IfModule>
  <IfModule mod_security.c>
    SetEnv CMSB_MOD_SECURITY1 1
  </IfModule>
  <IfModule mod_security2.c>
    SetEnv CMSB_MOD_SECURITY2 1
  </IfModule>
  <IfModule mod_rewrite.c>
    SetEnv CMSB_MOD_REWRITE 1
  </IfModule>
</IfModule>

# SECURITY: Deny access to common configuration and data files, eg: .htaccess, php.ini, .user.ini, php_errors.log, backup.sql, etc
<FilesMatch "\.(htaccess|ini|log|sql)$">
Order Deny,Allow
Deny from All
</FilesMatch>
# SECURITY: Deny access to common configuration and data files with php extensions, eg: settings.dat.php, etc
<FilesMatch "\.(dat|defaultSqlData|log|sql)\.php$">
Order Deny,Allow
Deny from All
</FilesMatch>

# Identify loaded config files - repurpose some lesser used php.ini directives to indicate which config files loaded
<IfModule mod_php5.c>
  php_value highlight.html '#000000; CMSB_CONFIG_HTACCESS'
  php_value date.default_latitude '11.1111 CMSB_CONFIG_HTACCESS'
</IfModule>

The code I use to logoff is as follows:

<?php if ($CURRENT_USER['position'] == 'Director'): ?>
<div style="border: 1px solid #000; background-color: #EEE; padding: 10px; width: 500px">
<p><a href='directors.php'>Board of Directors</a><br />
<a href='motions.php'>Motions & Financial Statements</a><br />
<a href='minutes.php'>Minutes & Record of Proceedings</a><br />
<a href='profile.php?action=logoff'>Logoff</a></p>
</div>

Any ideas how I can force the logoff and not display the BOD Minutes?

Ragi

So, that is one problem solved.  The other issue is why I can't logout.  I thought it might be my cache, but I flushed it and still see everything when I go to this page.

It works now.

Thanks Damon! 

I am trying to use Bootstrap Collapse with a CMSB multiple record editor.  Below is the original code for the Bootstrap Collapse:

<!DOCTYPE html>
<html>
<head>
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="stylesheet" href="http://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script>
  <script src="http://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
</head>
<body>

<div class="container">
  <h2>Accordion Example</h2>
  <p><strong>Note:</strong> The <strong>data-parent</strong> attribute makes sure that all collapsible elements under the specified parent will be closed when one of the collapsible item is shown.</p>
  <div class="panel-group" id="accordion">
    <div class="panel panel-default">
      <div class="panel-heading">
        <h4 class="panel-title">
          <a data-toggle="collapse" data-parent="#accordion" href="#collapse1">Collapsible Group 1</a>
        </h4>
      </div>
      <div id="collapse1" class="panel-collapse collapse in">
        <div class="panel-body">Lorem ipsum dolor sit amet, consectetur adipisicing elit,
        sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
        quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.</div>
      </div>
    </div>
    <div class="panel panel-default">
      <div class="panel-heading">
        <h4 class="panel-title">
          <a data-toggle="collapse" data-parent="#accordion" href="#collapse2">Collapsible Group 2</a>
        </h4>
      </div>
      <div id="collapse2" class="panel-collapse collapse">
        <div class="panel-body">Lorem ipsum dolor sit amet, consectetur adipisicing elit,
        sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
        quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.</div>
      </div>
    </div>
    <div class="panel panel-default">
      <div class="panel-heading">
        <h4 class="panel-title">
          <a data-toggle="collapse" data-parent="#accordion" href="#collapse3">Collapsible Group 3</a>
        </h4>
      </div>
      <div id="collapse3" class="panel-collapse collapse">
        <div class="panel-body">Lorem ipsum dolor sit amet, consectetur adipisicing elit,
        sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam,
        quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.</div>
      </div>
    </div>
  </div>
</div>
    
</body>
</html>


Here is my code:

<?php include 'common/includes/php_header.inc'; ?>
<?php
  // load records from 'training_resources'
  list($training_resourcesRecords, $training_resourcesMetaData) = getRecords(array(
    'tableName'   => 'training_resources',
    'loadUploads' => true,
    'allowSearch' => false,
  ));


?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <link rel="shortcut icon" href="assets/images/air-cadet-league-300x332-73.png" type="image/x-icon">
  <meta name="description" content="">
  <title>SSC Resources</title>
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:700,400&amp;subset=cyrillic,latin,greek,vietnamese">
  <link rel="stylesheet" href="assets/iconfont-plugin/bootstrap-material-design-font.css">
  <link rel="stylesheet" href="assets/bootstrap-material-design-font/css/material.css">
  <link rel="stylesheet" href="assets/bootstrap/css/bootstrap.min.css">
  <link rel="stylesheet" href="assets/socicon/css/socicon.min.css">
  <link rel="stylesheet" href="assets/mobirise/css/style.css">
  <link rel="stylesheet" href="assets/mobirise/css/mbr-additional.css" type="text/css">

</head>
<body>

<section class="mbr-navbar mbr-navbar--freeze mbr-navbar--absolute mbr-navbar--sticky mbr-navbar--collapsed" id="menu-44">
    <div class="mbr-navbar__section mbr-section">
        <div class="mbr-section__container container">
            <div class="mbr-navbar__container">
                <div class="mbr-navbar__column mbr-navbar__column--s mbr-navbar__brand">
                    <span class="mbr-navbar__brand-link mbr-brand mbr-brand--inline">
                        <span class="mbr-brand__logo"><a href="index.html"><img class="mbr-navbar__brand-img mbr-brand__img" src="assets/images/air-cadet-league-300x332-73.png" alt="BCPC"></a></span>
                        <span class="mbr-brand__name"><a class="mbr-brand__name text-white" href="https://bc-aircadetleague.com">BC Provincial Committee - Air Cadet League<br></a></span>
                    </span>
                </div>
                <div class="mbr-navbar__hamburger mbr-hamburger text-white"><span class="mbr-hamburger__line"></span></div>
                <div class="mbr-navbar__column mbr-navbar__menu">
                    <?php include 'common/includes/menu-2.inc'; ?>
                </div>
            </div>
        </div>
    </div>
</section>

<section class="mbr-section mbr-section--relative mbr-section--fixed-size mbr-after-navbar" id="content4-43" style="background-color: rgb(41, 105, 176);">

    <div class="mbr-section__container mbr-section__container--std-top-padding mbr-section__container--sm-bot-padding mbr-section-title container">
        <div class="mbr-header mbr-header--center mbr-header--wysiwyg row">
            <div class="col-sm-8 col-sm-offset-2">
                <h3 class="mbr-header__text">SSC Resources</h3>

            </div>
        </div>
    </div>
    <div class="mbr-section__container container">
        <div class="mbr-section__row row">
            <div class="mbr-section__col col-xs-12 col-sm-12">

                <div class="mbr-section__container mbr-section__container--middle">
                    <div class="mbr-header mbr-header--reduce mbr-header--center mbr-header--wysiwyg">
                        <h3 class="mbr-header__text"></h3>
                    </div>
                </div>
                <div class="mbr-section__container mbr-section__container--last">
                    <div class="mbr-article mbr-article--wysiwyg">
                    <div class="container">
  <div class="panel-group" id="accordion">
<?php foreach ($training_resourcesRecords as $record): ?>
    <div class="panel panel-default">
      <div class="panel-heading">
        <h4 class="panel-title">
          <a data-toggle="collapse" data-parent="#accordion" href="#collapse"+"<?php echo htmlencode($record['num']) ?>"></a>
        <?php echo htmlencode($record['title']) ?></h4>
      </div>
      <div id="'collapse'+'<?php echo htmlencode($record['num']) ?>'" class="panel-collapse collapse in">
        <div class="panel-body">
        <?php echo $record['content']; ?>
        </div>
      </div>
  </div>
  <?php endforeach ?>
</div>
</section>

<?php include 'common/includes/footer.inc'; ?>

  <script src="assets/web/assets/jquery/jquery.min.js"></script>
  <script src="assets/bootstrap/js/bootstrap.min.js"></script>
  <script src="https://maps.googleapis.com/maps/api/js"></script>
  <script src="assets/smooth-scroll/SmoothScroll.js"></script>
  <script src="assets/mobirise/js/script.js"></script>
</body>
</html>


Basically, the records are displayed, with the Bootstrap Collapse open, and not collapsed as it should be.  I believe the issue may be the code in blue above.

Ragi

First, after implementing your suggestion, only the title "Board of Directors Meeting Minutes" showed up (without login).  Then I logged in, and go exactly the same thing (no minutes).

So, I logged out, logged into CMSB and changed the 2016 Minutes from "private" to "public" and went back to the website.  No difference (logged in or out).

I reset the "public" in line 149 back to "private" and everything went back to what it was before, except that I can't logout, but only for the minutes.php page.  All BOD minutes up to 2015 show, nothing after (original condition).  If I go to the BOD page, I don't see their addresses & phone numbers unless I login again.

This is very confusing....!

Ragi

Well, either CMSB is acting weirdly or my code is doing something it was not designed to do!

Environment: CMSB v3.05 with Website Membership v1.11/Geocoder 1.05/Newsletter Builder 3.04

Website:  http://uccvi.com

The issue is this:  There is a private members area that only Directors can access (Website Membership).  Once in (see attached minutes.php), they will see additional documents not available to the general public.  Specifically the BOD Minutes.  For some reason, the 2016 Minutes don't show at all, and I don't understand why as they are identical to other year's Minutes.

I am very confused!

Ragi

It worked.  Thank you.

Ragi

Attached are all 3 files.

Ragi

You can try it on my sandbox at http://742sandbox.northernpenguin.com/history.php

Ragi

I have created a web page that has two (for now) forms, each connected to different multi-record table.  The problem is, no matter what I do, the second form always displays the top record and nothing else.

This is the top code:

<?php include 'common/includes/php_header.inc'; ?>
<?php
  // load record from 'history_overview'
  list($history_overviewRecords, $history_overviewMetaData) = getRecords(array(
    'tableName'   => 'history_overview',
    'where'       => '', // load first record
    'loadUploads' => true,
    'allowSearch' => false,
    'limit'       => '1',
  ));
  $history_overviewRecord = @$history_overviewRecords[0]; // get first record
  if (!$history_overviewRecord) { dieWith404("Record not found!"); } // show error message if no record found


  // load list records from 'historical_notes'
  list($historical_notesRecords, $historical_notesMetaData) = getRecords(array(
    'tableName'   => 'historical_notes',
    'loadUploads' => true,
    'allowSearch' => false,
  ));

  // load records from 'awards_trophies'
  list($awards_trophiesRecords, $awards_trophiesMetaData) = getRecords(array(
    'tableName'   => 'awards_trophies',
    'loadUploads' => true,
    'allowSearch' => false,
  ));
?>

These are the 2 forms:

<table>
<tr>
<td>
  <form method="get" action="historyNotes.php?">
  <h2>Select a year in history:</h2>
    <select name="year">
      <option value="">--</option>
      <?php foreach ($historical_notesRecords as $listRecord): ?>
        <option value="<?php echo htmlencode($listRecord['num']); ?>" <?php selectedIf($listRecord['num'], @$_REQUEST['year']); ?>>
          <?php echo htmlencode($listRecord['title']); ?>
        </option>
      <?php endforeach; ?>
    </select>
    <br>
    <input type="submit" value="Submit">
    </form>
</td>
<td>
<form method="get" action="historyAwards.php?">
  <h2>Select an award:</h2>
    <select name="title">
      <option value="">--</option>
      <?php foreach ($awards_trophiesRecords as $awardRecord): ?>
        <option value="<?php echo htmlencode($awardRecord['num']); ?>" <?php selectedIf($awardRecord['num'], @$_REQUEST['award']); ?>>
          <?php echo htmlencode($awardRecord['title']); ?>
        </option>
      <?php endforeach; ?>
    </select>
    <br>
    <input type="submit" value="Submit">
</form>
</td>
</tr>

</table>


Any ideas would be greatly appreciated!

Ragi

Ragi

Checking mail account: Gmail
Connecting to IMAP host: imap.gmail.com
IMAP error: Can not authenticate to IMAP server: [ALERT] Application-specific password required: https://support.google.com/accou

Not exactly sure what its trying to tell me here!

Ragi

Ragi

Ragi

Thank you

Ragi

This is my second installation of CMSB 3.05 and for some reason the "Powered by" text at the bottom of my website is still showing up even though I have registered the instance.  It worked fine on my 1st instance, but for some reason it doesn't want to go away on this instance!

Ragi

As for my server, that is not an issue as my provider is very accommodating.  Since my clients are the only ones on this server, I can request changes if needed.

Ragi

E_WARNING: is_file(): open_basedir restriction in effect. File(///bin/php.exe) is not within the allowed path(s): (/home/sekaly:/usr/lib/php:/usr/local/lib/php:/tmp)

#0  _errorlog_logErrorRecord() called at [/home/sekaly/public_html/cmsb/lib/errorlog_functions.php:60]
#1  _errorlog_catchRuntimeErrors()
#2  is_file() called at [/home/sekaly/public_html/cmsb/lib/menus/admin/general.php:59]
#3  _getPhpExecutablePath() called at [/home/sekaly/public_html/cmsb/lib/menus/admin/general.php:952]
#4  _getContent()
#5  call_user_func_array() called at [/home/sekaly/public_html/cmsb/lib/common.php:1877]
#6  ob_capture() called at [/home/sekaly/public_html/cmsb/lib/menus/admin/general.php:22]
#7  include(/home/sekaly/public_html/cmsb/lib/menus/admin/general.php) called at [/home/sekaly/public_html/cmsb/lib/admin_functions.php:441]
#8  showInterface() called at [/home/sekaly/public_html/cmsb/lib/menus/admin/actionHandler.php:30]
#9  admin_dispatchAction() called at [/home/sekaly/public_html/cmsb/lib/menus/admin/actionHandler.php:25]
#10 include(/home/sekaly/public_html/cmsb/lib/menus/admin/actionHandler.php) called at [/home/sekaly/public_html/cmsb/lib/menus/default/actionHandler.php:143]
#11 _redirectForCustomMenus() called at [/home/sekaly/public_html/cmsb/lib/menus/default/actionHandler.php:30]
#12 include(/home/sekaly/public_html/cmsb/lib/menus/default/actionHandler.php) called at [/home/sekaly/public_html/cmsb/admin.php:40]


Ragi

Done.  No errors so far.  I have emailed you as requested.

Ragi