OK, it looks like there is a security hole in the Joomla Bibtex component that some cheerful group are taking advantage of.  I would love to get this fixed, but I simply do not have the time at the moment and have little experience when it comes to security.  I assume it is an SQL injection problem, can anyone give me a hint as to how to close the hole?

http://biogeochemistry.org/index.php?option=com_jombib&Itemid=43?afilter=Calvo
should be:

http://biogeochemistry.org/index.php?option=com_jombib&Itemid=43&afilter=Calvo

If you are still interested in this, please contact me by e-mail.  i made a version like this for someone else.

Yes, there is definitely a bug there.  Would you mind changing lines 16 and 17 of jombib.php from

$catId = intval( mosGetParam( $_REQUEST, 'catid', 0 ) );
if($catId==0){

to :

$catId = intval( mosGetParam( $_REQUEST, 'catid', -1 ) );
if($catId==-1){

and let me know if that works.

Mark

Sorry, the site had been hacked, it should now be available.

Mark

Hi,

Sorry for not replying sooner.  The site was hacked for a while and I have been very busy.  What you want to do is possible, but only by modifying the php code directly.  If you wish to try to do this I would be happy to help you.

Mark

Sounds like you are doing fine.  Did you find the file format for bibtex files?  if not they should look like this:

for each reference:

@reftype{refId,
  field1      = "value1",
  field2      = "value",
  etc...
  }

multiple authors should be split by and:
e.g.
"G. B. Johnson and W. W. Howells and A. N. Other",

Thanks, I will look into that if I have time to work on the component again.

Unfortunately ISBN is not a standard bibtex field, so I did not include it.  I could help you change the code to include it, especially if you are willing to replace another unused field

Could you describe how your categories and related menus are structured?

That is a sensible short term fix for the problem,  however it now means that if you try to enter a string which is not mysql safe, i.e. unusual characters ( I cannot remember which) then the data might not get added.

Not that would work for 1.5rc3 :-(

There is a bug in the code regarding apostrophes, unfortunately I do not have time to fix it at the moment.

It would probably take a few hours of work, but given you are not a programmer you would have to learn php first. Unfortunately I do not have time at the moment to do this for you as I am writing up my PhD.

What version of php is your server running?