vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vbBux / vbPlaza (https://vborg.vbsupport.ru/forumdisplay.php?f=171)
-   -   vbBux / vbPlaza v1.5.8 has been released! (https://vborg.vbsupport.ru/showthread.php?t=121138)

da420 02-07-2007 06:40 PM

Quote:

Originally Posted by Zia (Post 1176643)
We r waiting for the fix...

Addiction is a terrible thing.

X-Files 02-08-2007 06:32 PM

Is this what we need to patch this? Can someone provide a definitive answer? I think this version at least needs a fix applied since we have no idea when v2 will be out.

Quote:

Originally Posted by Acers (Post 1176508)
Just changes the the php function with vb's own cleaning class.

includes/function_vbplaza.php(line 152)

PHP Code:

$message strip_tags($message); 

make that
PHP Code:

$message $vbulletin->input->clean($messageTYPE_NOHTML); 

go to
vbplaza/action.admindonate.php (line 133)
PHP Code:

$action['reason'] = strip_tags($action['reason']); 

make that
PHP Code:

$action['reason'] = $vbulletin->input->clean($action['reason'], TYPE_NOHTML); 


goto
vbplaza/action.changeotherusertitle.php (line 136)
PHP Code:

$newusertitle_stripped strip_tags($newusertitle); 

make that
PHP Code:

$newusertitle_stripped $vbulletin->input->clean($newusertitleTYPE_NOHTML); 


goto
vbplaza/action.changeusertitle.php (line 87)
PHP Code:

$newusertitle_stripped strip_tags($newusertitle); 

make that
PHP Code:

$newusertitle_stripped $vbulletin->input->clean($newusertitleTYPE_NOHTML); 


goto
vbplaza/action.donate.php (line 164)
PHP Code:

$action['reason'] = strip_tags($action['reason']); 

make that
PHP Code:

$action['reason'] = $vbulletin->input->clean($action['reason'], TYPE_NOHTML); 




goto
vbplaza/action.gift.php (line 209)
PHP Code:

$action['giftmessage'] = strip_tags($action['giftmessage']); 

make that
PHP Code:

$action['giftmessage'] = $vbulletin->input->clean($action['giftmessage'], TYPE_NOHTML); 


goto
vbplaza/action.ribbons.php (line 218)
PHP Code:

$action['ribbonmessage'] = strip_tags($action['ribbonmessage']); 

make that
PHP Code:

$action['ribbonmessage'] = $vbulletin->input->clean($action['ribbonmessage'], TYPE_NOHTML); 



fly 02-08-2007 06:52 PM

<font size="5">CMX, WHERE CAN I SEND DONATIONS TO? THANKS FOR COMING BACK!</font>

silvermerc 02-08-2007 07:16 PM

Erm....I can't download it for some reason.The link to the thread is broken

zappsan 02-08-2007 07:26 PM

Welcome back, CMX :)

Quote:

Originally Posted by silvermerc (Post 1177822)
Erm....I can't download it for some reason.The link to the thread is broken

Yes, there was a security problem so the hack has been removed.

Shazz 02-08-2007 08:30 PM

Could have just closed the thread.
Now many people are going to be confused where to get the store

kjhkjh 02-09-2007 03:47 AM

Err... I want this hack, never installed it before, have seen the security threat mentioned, seems to be a fix a few posts above me... but does anyone know if a new version is coming out or if there is somewhere that I can download the current version from and fix it?

Thx

sinpeople 02-09-2007 01:39 PM

Never experienced this before. Anyone can tell typically how long such issue can be closed?

If it takes more than one month, maybe consider other point system is a not bad choice.
Thanks.

hitboy 02-09-2007 02:47 PM

Quote:

Originally Posted by sinpeople (Post 1178376)
Never experienced this before. Anyone can tell typically how long such issue can be closed?

If it takes more than one month, maybe consider other point system is a not bad choice.
Thanks.

Another point system? lol uh there alot of people on here that have been using the hack for months that would screw everything up and as far as i can see for 3.6.4 there is only icash and its very simple mod its good but not the best alternative compared to vbbux

Aclikyano 02-09-2007 06:04 PM

This hack has an EXPLOIT IN IT !.
a few sites as I recall somewere on this board were HACKED thru the donation feature!.
it has been removed until the ex is fixed.


All times are GMT. The time now is 11:10 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02415 seconds
  • Memory Usage 1,765KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (14)bbcode_php_printable
  • (4)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete