| Black Tiger |
02-16-2008 02:49 PM |
Is there indeed an existing exploit at the moment? People can say there is, but I won't turn downloads II off until it's confirmed.
@RSJelle: I think the problem is in the code of the addon. Probably the "order by" piece. It's complaining about a missing ; or something, you are good at code, maybe you can see what's wrong because you know a lot of code and also know which tables are used in the present downloads II version.
This is the downloads addon code they use:
Code:
$mods = $db->query("SELECT id,name FROM " . TABLE_PREFIX . "dl_cats ORDER BY `id`");
while ($mod = $db->fetch_array($mods))
{
$url = $vbseo_vars['bburl'].'/downloads.php?do=cat&id='.$mod['id'];
if(VBSEO_ON)
$url = vbseo_any_url($url);
vbseo_add_url($url, 1.0, '', 'daily');
}
$mods = $db->query("SELECT id as fid FROM " . TABLE_PREFIX . "dl_files");
while ($mod = $db->fetch_array($mods))
{
$url = $vbseo_vars['bburl'].'/downloads.php?do=file&id='.$mod['fid'];
if(VBSEO_ON)
$url = vbseo_any_url($url);
vbseo_add_url($url, 1.0, '', 'daily');
}
From the previous version the change to "dl_files" and "dl_cats". Previously Order by was by 'order' which now they changed to 'id' but maybe this is not correct anymore or there are some other problems.
If you can't see it, oke, bad luck for me then.:) |
More Information