Re: bug in Invision Power Board[patch]

From: silent needle (silentneedleat_private)
Date: Mon Aug 11 2003 - 05:33:33 PDT

  • Next message: bugzillaat_private: "[RHSA-2003:235-01] Updated KDE packages fix security issue"

    
     ('binary' encoding is not supported, stored as-is)
    In-Reply-To: <20030809082131.25004.qmailat_private>
    
    to patch the forum
    all what you have to do
    is adding these lines in the begining of admin.php
    ======admin.php======
    <?php
    
    if (strstr($adsess,"'") != NULL){
      echo "Silent Needle: i don't like you.<br>dont try to hack. :) [be a 
    white hat don't be a black hat]<br><a href='index.php'>index.php</a>"; 
      exit;
    }
    if (strstr($adsess,"\"") != NULL){
      echo "Silent Needle: i don't like you.<br>dont try to hack. :) [be a 
    white hat don't be a black hat]<br><a href='index.php'>index.php</a>"; 
      exit;
    }
    //.........
    //rest of code
    =====================
    this work with me and i hope it work with you too.
    
    Oh Long Night
    greetz to: SP.IC, NetSpider, ARAB-HAK, zalaboza, C0NIk, and all 
    arabsecure.net t34m..
    
    Silent Needle
    member of ArabSecure.net t34m
    silentneedleat_private
    



    This archive was generated by hypermail 2b30 : Mon Aug 11 2003 - 09:38:34 PDT