English version - phpBB2 by Przemo 1.12.6 UPDATE 4
Matteo - 30-08-2010, 15:04 Temat postu: phpBB2 by Przemo 1.12.6 UPDATE 4 Przemo detected an average security vulnerability - allow an attacker to significant slowdown forum.
The amendment is very simple, just overwrite the file includes/sessions.php.
In attachment you find this file + check_files.php and check_data.php <- for people who have a current version (1.12.6p3).
People who don't have the current version should do it, if they can't do this (for some reason) - overwrite only file includes/sessions.php, provided that it doesn't modify this file before. Previous size this file is 29.921, if it is different you have to make manual changes:
includes/sessions.php
FIND: Kod: | $userdata['user_hot_threshold'] = (intval($userdata['user_hot_threshold']) < 1) ? $board_config['hot_threshold'] : intval($userdata['user_hot_threshold']); |
AFTER, ADD: Kod: | $userdata['user_topics_per_page'] = ($userdata['user_topics_per_page'] > 50) ? 30 : $userdata['user_topics_per_page'];
$userdata['user_posts_per_page'] = ($userdata['user_posts_per_page'] > 50) ? 30 : $userdata['user_posts_per_page']; |
(official content, thanks to Przemo)
|
|
|