phpBB2 by Przemo

[Matteo]

Przemo detected an average security vulnerability - allow an attacker to significant slowdown forum.

The amendment is very simple, just overwrite the file includes/sessions.php.
In attachment you find this file + check_files.php and check_data.php <- for people who have a current version (1.12.6p3).

People who don't have the current version should do it, if they can't do this (for some reason) - overwrite only file includes/sessions.php, provided that it doesn't modify this file before. Previous size this file is 29.921, if it is different you have to make manual changes:

includes/sessions.php
FIND:

Kod:

$userdata['user_hot_threshold'] = (intval($userdata['user_hot_threshold']) < 1) ? $board_config['hot_threshold'] : intval($userdata['user_hot_threshold']);

AFTER, ADD:

Kod:

$userdata['user_topics_per_page'] = ($userdata['user_topics_per_page'] > 50) ? 30 : $userdata['user_topics_per_page']; $userdata['user_posts_per_page'] = ($userdata['user_posts_per_page'] > 50) ? 30 : $userdata['user_posts_per_page'];

(official content, thanks to Przemo)

---

1.12.6_p4.zip

Pobierz Plik ściągnięto 1044 raz(y) 30,76 KB

[Gadatliwa Kasia]