Home aeyStudio
Welcome Guest · Registration
Resources
Download Seportal
Demo Site
SePortal Sites

Users
Username:

Password:

Log me on automatically next visit?


» Forgot password
» Registration

Topics
Home
Seportal (5)
News (3)

Who is Online
Currently active users: 6
There are currently 0 registered user(s) (0 among them invisible) and 6 guest(s) online.

Random Image
Üyeler/Users

Üyeler/Users
Comments: 0
zebaniz

Powered By
Powered by SePortal

Rate SePortal at
Listed at Hot Scripts in PHP

Scripts.com


ScriptSearch.com



Add Reply New Topic

>  [2008-01-06] Important security fix for 2.3 - Önemli bir düzeltme
 
 
zebaniz
Posted: 06.01.2008 - 20:42
Quote


Administrator
Group Icon

Group: Admin
Total posts: 306
User No: 1
Join Date: 01.01.2007 00:00



 
Türkçe:
Bu Önemli düzeltmenin yapılması gereklidir:
Düzeltme: 1
forums/topic.php dosyasını açın;
Aşağıdaki metni bulun (162.satır)
PHP

"[ <a href='".$site_sess->url("moderator.php?action=ip&incoming=".$row['ip_address'])."' target='_blank'>".$row['ip_address']."</a> ]";

ve aşağıdaki ile değiştirin:
PHP

"[ <a href='".$site_sess->url("modcp.php?action=ip&incoming=".$row['ip_address'])."' target='_blank'>".$row['ip_address']."</a> ]";


Düzeltme: 2
forums/modcp.php dosyasını açın;
Aşağıdaki metni bulun (1982.satır)
PHP

$iptool 
$HTTP_GET_VARS['iptool'] ? $HTTP_GET_VARS['iptool'] : $HTTP_POST_VARS['iptool'];


hemen altına bu metni ekleyin;

PHP

$incoming 
$HTTP_GET_VARS['incoming'] ? $HTTP_GET_VARS['incoming'] : $HTTP_POST_VARS['incoming'];


Aynı yerde aşağıdaki metni bulun (2004.satır)

PHP

"ip" => $ip,


aşağıdaki ile değiştirin:
PHP

"ip" => $incoming,





English:
[b]This is an important security fix[/b]
Step 1
Open forums/topics.php (line 162):

Replace
PHP

"[ <a href='".$site_sess->url("moderator.php?action=ip&incoming=".$row['ip_address'])."' target='_blank'>".$row['ip_address']."</a> ]";


with

PHP

"[ <a href='".$site_sess->url("modcp.php?action=ip&incoming=".$row['ip_address'])."' target='_blank'>".$row['ip_address']."</a> ]";


Step 2
Open forums/modcp.php (line 1982) and search for

PHP

$iptool 
$HTTP_GET_VARS['iptool'] ? $HTTP_GET_VARS['iptool'] : $HTTP_POST_VARS['iptool'];


Add the following line below

PHP

$incoming 
$HTTP_GET_VARS['incoming'] ? $HTTP_GET_VARS['incoming'] : $HTTP_POST_VARS['incoming'];


and find (line 2004):

PHP

"ip" => $ip,


replace:

PHP

"ip" => $incoming,

Offline zebaniz admin at seportal.org http://www.seportal.org
Top

Add Reply New Topic



Contribute | Forums | Gallery | Calendar | Links | Downloads | Members | Search | Guestbook | Article Directory

Powered by SePortal 2.5
Copyright © 2007-2012 SePortal.org