warning on last thread hack

[q8manar]

Hello

I have recieved warning from some programmer that told me about ttlast.php (for last 10 threads hack)
he siad you should remove $fsel from this file
becuase by this code can any hacker get the admin. encoding password for my vb

I'm using vb 3.0.3
and I checked ttlast.php and I found this code inside it .

Is this truw ?

[Andreas]

I don't know/have this ttlast.php but this could of course be possible if the script has SQL injection issues or other vulnerbilities (like many hacks do have).