All coments show as "a"

[Gladius2007]

I only noticed this today so I have no idea how long back it goes but all the comments with all the games aren't showing on the results pages any more... instead there's just the letter "a" showing in all the comment fields.

Any ideas?

[Hippy]

there are 2 updated arcade.php files here
https://vborg.vbsupport.ru/showthread.php?t=282802
depending on your server
over write yours in your forums root dir and test
it will not restore the damage that has been done but it will work from here on out

[Gladius2007]

Wait, are you saying all our comments have been wiped out? That's years worth of comments... wtf?

I'm on 3.8.5 though... is that thread still relevant for me? I'm not actually seeing any errors anywhere though... just this issue with comments.

[Hippy]

that's not for error only its the ibp_cleansql that's was the exploit and the update did not know if it was good or bad
so it was whipping good and bad..
the files I pointed you only fixes the security problem and does not remove good info

[Gladius2007]

Sorry, I don't understand... I'm not sure if we're talking about the same thing.

What exactly has caused all our comments to show as "a" instead of the actual comments?

Also, I'm on 3.8.5 and the thread says that it's for 4.x. Is it for both versions?

[Hippy]

the update 2.7.2
"ibp_cleansql" was added / changed or reconfigured to stop a exploit from with in the comment area
but it's doing what your explaining
the new arcade file I linked you to has fixed the exploit and stopped the issue your talking about
read a little here
https://vborg.vbsupport.ru/showthread.php?t=284073&highlight=comment

there is a lot of threads about the issue your having

[Gladius2007]

Great... I guess it's pointless asking now why the hell no mailing was sent out to notify the users of this exploit. I didn't know about it until just now. :/

Thanks for the info, I'll apply the fix.

[Hippy]

There was and the mod was quarantine to the graveyard.. And the exploit was fixed. That's when this was found out. the fix for it was never addressed because it's not a security issue.

[Gladius2007]

I got THAT one... and I applied it. But anyone sensible would assume that an issue so severe that it could wipe out all the user comments would warrant another warning mail about it. As if this mod didn't have enough other issues besides being effectively abandoned, this really is the final straw. I guess I only have myself to blame for not moving away from it sooner. :/