Latest Posts restored (updated)

[DaveP]

Kent

Here is an example of the kind of patches it needs:

$topic_title = $myts->makeTboxData4Show($arr["topic_title"]);

                        echo "  ".$topic_title."";

That will "safe" the topic for you and fix the remote code exploit although its not perfect, calling sanitize directly to turn off the use of smileys would be better.


Compliments of amigaworld.net.

[DaveP]

*cough*

I wrote the code fix and Orgin suggested which method to use from that class ;-)

Not that thats important, oh shut up Dave ;-)


Dave.

[DaveP]

@Targhan

I think its probably overkill as only you or authorised people can set the forum name :-)

[DaveP]

No worries, when we figured it out we went round paranoid looking at all the fields also :-)

[DaveP]

http://www.xoops.org/modules/newbb/viewtopic.php?topic_id=16640&forum=4