How do you replicate this bug?

I assume that this only applies to site owners who have upgraded beyond v3.04 ... right?

99% of the time security issues will go back for a long time, all the recent updates AFAIK will span back to at least vB3 RC1

Well, I have vb3.03 installed and I cannot find the line that Erwin described above in the file mentioned.

If you are refering to that, its only in 3.0.6 but 3.0.3's bbcodeparse file is venuerable.

How Zac?

Thnx for the update:)

can someone give us the fix for 3.0.3
i can't update until my server decides to let me restore backups

This is getting silly. All my announcements this year so far at www.ntlhellworld.com have been

Site closed from upgrades
Upgrades completed
Site closed for upgrades
Upgrades completed
Site closed for upgrades
Upgrades completed.

I've still got my other site www.peterska2.co.uk to do again and then I've got other sites that I look after that will also need upgrading again.

If I get through them all again and then 3.0.7 comes out I'll be marching to Jelsoft HQ and screaming at them for the hassle while in the same breath praising them for keeping us so uptodate and informed about potential security problems.

Im also getting tired of the updates. Its good that they fix the problems but they need to be more picky before the release something. I cant afford to pay someone for a hack then update my site then pay them to fix it to work with the new version over and over.