NEW VERSION OF PHPBB..SECURITY ISSUE

Post by **dmmh** » Mon Feb 28, 2005 1:26 pm

http://www.webmasterworld.com/forum103/363.htm

read it and weap

Post by **MKJ** » Mon Feb 28, 2005 1:34 pm

already exploited that one
guess why dr geebs' account was inactive

Post by **dmmh** » Mon Feb 28, 2005 1:39 pm

Post by **Turbanator** » Mon Feb 28, 2005 3:55 pm

thx, done

Post by **Eraser** » Mon Feb 28, 2005 3:57 pm

What do you guys use to track custom changes you've made to phpBB?

Post by **Turbanator** » Mon Feb 28, 2005 4:14 pm

erm... honestly? nothing!

I change code to often to keep track of things, I know, bad habit... but when it comes to upgrading to the next version, I just patch the code manually. First time I had to upgrade I actually downloaded the old version of phpbb and then downloaded the new one and ran a compare app to see the differances. then I found out they actually post a list of code changes in their forum

Post by **blood.angel** » Mon Feb 28, 2005 4:15 pm

So who wants to be mod of R&R then, highest bid wins.

Post by **Turbanator** » Mon Feb 28, 2005 4:19 pm

(and i already ran an SQL query to see if someone managed to exploit the bug before I patched it... and no... no one has

(this time))

Post by **MKJ** » Mon Feb 28, 2005 4:20 pm

you foiled me again !

Post by **blood.angel** » Mon Feb 28, 2005 4:21 pm

But I had admin rights on rawone for fecking months until I decided to make it public.
Im fucking JeffK.

Post by **Turbanator** » Mon Feb 28, 2005 4:24 pm

blood.angel wrote:Im fucking JeffK.

is he tight or a little loose?

Post by **blood.angel** » Mon Feb 28, 2005 4:27 pm

Turbanator wrote:
blood.angel wrote:Im fucking JeffK.
is he tight or a little loose?

For that I think Ill ban you.

Post by **Eraser** » Mon Feb 28, 2005 7:19 pm

Turbanator wrote:
blood.angel wrote:Im fucking JeffK.
is he tight or a little loose?

:icon19:

Post by **Eraser** » Mon Feb 28, 2005 7:26 pm

Turbanator wrote:erm... honestly? nothing!

I change code to often to keep track of things, I know, bad habit... but when it comes to upgrading to the next version, I just patch the code manually. First time I had to upgrade I actually downloaded the old version of phpbb and then downloaded the new one and ran a compare app to see the differances. then I found out they actually post a list of code changes in their forum

eheh that'll be a bitch to figure out later on

Post by **dmmh** » Mon Feb 28, 2005 8:49 pm

manually adding the code mostly isnt that much work. its just a matter of opening an file. do ctrl-f and ctrl-v mostly.