Quote:

---

We have released version 6.5.3 to the members area. This release contains a fix for a secury issue we were informed of this afternoon. It also contains a handful of other fixes for a few bugs that have been floating around for awhile.

If you don't want to go through the hassle of downloading 6.5.3 you can apply the security fix yourself. It's a fairly quick fix as it only requires changing 2 files. Anyone running a version between 6.4 through 6.5.2 will want to apply this:

At the top of addpost.php you'll see this:

require ("./includes/main.inc.php");

right before that, add this:

define('ADDPOST',1);


Then, in addpost_newpoll.php, at the top, you'll see this:

// ------------------------------------
// THIS FILE IS INCLUDED BY ADDPOST.PHP

Right after that, add this:

if (!defined('ADDPOST')) {
exit;
}

---

Many of you know I run vertexhost - I've see what this one can do. It can comprimise the whole server. As a result, I've personally fixed about 50+ threads installs once we were aware. I can't urge you enough to fix this on your sites.

--------------------
Josh - Joshua PettitWebsite - For Hire Coding work and Modifications

Feel Better, Look younger - www.BuyTransD.com
Use Coupon Code 1004 to Save $20 Off Your Initial Order of Trans-D Tropin

Post Extras:

Quote:

---

Yesterday the Turkish cracker going by the handle "Iskorpitx", succesfully hacked 21,549 websites in one shot (plus 17,000 as our last update) and defaced (on a secondary page) all of them with a message showing the Turkish flag (with AtaTurk face on it) and reporting:

"HACKED BY iSKORPiTX

(TURKISH HACKER)

---

--------------------
http://IsThereSexAfterDeath.com
http://clubadventist.com
( I like to check out the toys others have added )

Post Extras: