Link Manager 3.0 Support Thread

[fajmp]

I recently unchecked my link from the layout boxes until I get a chance to work on getting some links. But this morning I had a link, placed in there (even though I had it unchecked)
It was a ######## link. How can that happen? Is there some weakness in the addon? I am timid of leaving it on.
Anyone else ever have this problem?

Can someone reply to this? It's a very weird and possibly dangerous (to my website) happening.

[clydejones]

Can someone reply to this? It's a very weird and possibly dangerous (to my website) happening.

URL for your site?

You can turn the sidebox off admin -> tools -> layout boxes controller

[fajmp]

That's what concerns me...I had it turned off! I had turned it off a couple of days before to think about the best way to use it. And then I got the email saying that someone had put in a new link.
A bad link.

http://www.talkingwalls.ca/talkingwalls/

Do you suppose it would take that long for the email to get through?

[clydejones]

That's what concerns me...I had it turned off! I had turned it off a couple of days before to think about the best way to use it. And then I got the email saying that someone had put in a new link.
A bad link.

http://www.talkingwalls.ca/talkingwalls/

Do you suppose it would take that long for the email to get through?

If it was a link from a spammer; they wouldn't necessarily need to link to the submit link page from the sidebox. They could have used a "bot" that would search for and then submit a link automatically.

That's why ALL links must be approved from your admin panel before they are displayed.

You might want to check through the support thread for the "captcha" fix which can help reduce spam links.

[fajmp]

that's very true. It wasn't spam I guess, just a ###### link..so it makes me think that reciprical linking is not such a great idea.
thank you for your input.

[clydejones]

Well, a little searching found that this needs to be allowed in the php.ini file by adding the following.
allow_url_fopen = On;
allow_url_include = On;

More research suggests that doing this would allow a huge opening for DoS attacks and scripting injections both of which I'm quite familiar with from running php-nuke sites. Back then I was able to install a security module that would automatically ban anyone trying hack into my sites.

Any opinions about this, or maybe it should be a new topic in the security forum?

Thanks

I'm looking at alternatives for this.

[clydejones]

Well, a little searching found that this needs to be allowed in the php.ini file by adding the following.
allow_url_fopen = On;
allow_url_include = On;

More research suggests that doing this would allow a huge opening for DoS attacks and scripting injections both of which I'm quite familiar with from running php-nuke sites. Back then I was able to install a security module that would automatically ban anyone trying hack into my sites.

Any opinions about this, or maybe it should be a new topic in the security forum?

Thanks

I'm looking at alternatives for this.

This fix uses a CURL alternative to "allow_url_fopen".

Just unzip the package and upload the file to your admin folder.

jabbawest_fix.zip