Forum upgrading in process now.
Ironing out security vulnerability.
Stuff ironed out will be:
Changes since 2.0.11
* Prevented full path display on critical messages
* Fixed full path disclosure in username handling caused by a PHP 4.3.10 bug
* Added exclude list to unsetting globals (if register_globals is on)
* Fixed arbitrary file disclosure vulnerability in avatar handling functions
* Fixed arbitrary file unlink vulnerability in avatar handling functions
* Removed version number from powered by line
* Merged database update files to update_to_latest.php file
* Fixed path disclosure bug in search.php caused by a PHP 4.3.10 bug
* Fixed path disclosure bug in viewtopic.php caused by a PHP 4.3.10 bug
And
Changes since 2.0.12
* Ommitted preg_replace warning in viewtopic due to improper working of preg_quote in PHP
* Fixed high severity issue in session handling allowing everyone gaining administrator rights.
* Minimum requirements raised to PHP 4.0.3 or above due to fixing vulnerability issues breaking PHP3 compatibility.
Forum upgrade done (01 March 2005)
Forum upgrade done (01 March 2005)
Last edited by nF on Mon May 09, 2005 2:02 pm, edited 2 times in total.
.___.
{O,o} O'RLY?
/)__)
-"-"-
{O,o} O'RLY?
/)__)
-"-"-
- Airconvent
- Super Moderator
- Posts: 5787
- Joined: Tue Sep 30, 2003 11:49 pm
- Location: United Federation of the Planets
Hi YJ
I noticed that between just now when you were "upgrading" to now when you are "done"...the online status has disappeared. was this deliberate?
we used to be able to see if a user is online by a status button on the bottom left...
rich
I noticed that between just now when you were "upgrading" to now when you are "done"...the online status has disappeared. was this deliberate?
we used to be able to see if a user is online by a status button on the bottom left...
rich
The Boldly Go Where No Meade Has Gone Before
Captain, RSS Enterprise NCC1701R
United Federation of the Planets
Captain, RSS Enterprise NCC1701R
United Federation of the Planets
- Airconvent
- Super Moderator
- Posts: 5787
- Joined: Tue Sep 30, 2003 11:49 pm
- Location: United Federation of the Planets
- weixing
- Super Moderator
- Posts: 4708
- Joined: Wed Oct 01, 2003 12:22 am
- Favourite scope: Vixen R200SS & Celestron 6" F5 Achro Refractor
- Location: (Tampines) Earth of Solar System in Orion Arm of Milky Way Galaxy in Local Group Galaxies Cluster
Hi,
Thanks for your hard work and have a nice day.
Ha Ha... :k-chuckle: Hope that Censorship Board didn't see your signature... It may give your signature a "PG" rating.. hee hee :k-lol: :k-lol:should have said this earlier but I was distracted by his cute "lord of the rings cartoon" signature....heh heh
Thanks for your hard work and have a nice day.
Yang Weixing
"The universe is composed mainly of hydrogen and ignorance."
"The universe is composed mainly of hydrogen and ignorance."