PeopleBook sanitized Component

This extension was created by Nicholas Moyroud, based on MambatStaff from Marco Salcher and AkoStaff from Arthur Konze. I tried so long and contact Dr. Moyroud, but since I can't, and it seems to me this is an abandoned project, I try and submit here with my modifications.

PeopleBook is a nice directory component; that is, it allows you and specify a list of contacts, organized in one or more categories; to specify a serie of fields for each contact (you can add custom fields also); to search contacts, to order them, to mask their e-mail and display a contact form instead, and so on.

As I said, component was developed by Nicholas Moyroud; it was subject to a number of attacks, mainly due to improper input validation. My work was just using Joomla! framework to sanitize CVE-2006-4195 vulnerability, and adding input validation trough a custom function using several known PHP functions such as settype(), htmlspecialchars() and mysql_escape_string().

Component is now in production. As usual, any feedback is welcome.

Report

bybaijianpeng on January 9, 2009
Thanks to Paolo De Nictolis for your security patch.

I would like to see more template for this component. Such as, in the main page, show people photo thumbnails in the same line with their names.

Thank you.