Image message board CGI "Joyful Note X v2.0" developed - JOYFUL NOTE v7.3 (mini counter compatible) + Lightbox2 (v2.11.3) & Bilingual function source revealed

⌛Time it takes to read this article: 2 minutesBased on the CGI "Joyful Note v7.3" of the image bulletin board, we will release the source of "Joyful Note X v2.0" that incorporates Lightbox2 that can pop up images and also supports bilingual functions (Japanese / English).

Lightbox functionality added to Joyful Note

⌛Time it takes to read this article: < 1 minutesWe have revised the photo bulletin board program (Joyful Note v6.02) installed on this site and incorporated the latest version of Lightbox (2.7.1). 👉 Photo BBS based on Joyful Note X 👉 Joyful Note The latest version of Lightbox is developed based on jQuery. The official website of Lightbox is here 👉 https://www.lokeshdhakar.com/projects/lightbox2/ However, we hope that this modification does not create a new security hole. (..;) * Added on May 27th: The area of ​​concern is that when editing an article, the tag ">" is entered in the title name, and XSS is written, but when I tested it, it was properly converted to "&gt;", so I think it's probably okay.

Vulnerability discovered in Joyful Note and Hidemaru editor!

⌛Time it takes to read this article: < 1 minutesToday, we updated the following two pieces of software that were reported to the NVD (National Vulnerability Database). File manipulation vulnerability in Joyful Note Buffer overflow vulnerability in Hidemaru editor "Joyful Note" (a Perl CGI program) is used on this site's image bulletin board, so a fix was urgently needed. However, the program was modified to accommodate bilingual users, so it took some time to update. Additionally, we also fixed a bug where ".css/.js" files could not be read properly due to server permissions. * Add the following definition to the relevant directory AddHandler text/html .html .htm AddHandler image/gif .gif AddHandler image/jpeg .jpeg .jpg .jpe AddHandler image/png .png AddHandler text/css .css AddHandler application/x-javascript .js A surprising vulnerability has been discovered in the "Hidemaru Editor", which is a favorite of Windows programmers! (°°;)