topXstats has been fixed, so I'm not sure what relevance your continual digs at it being "unsupported" have, or are trying to achieve.

CyB, although the specifics may pertain to Xstats - the hack being used by some snotty script kiddie is having an affect on this hack that you've written. Honestly - I know I had your hack installed, and I know my site got snotted on while using it, which I don't hold you responsible for in any manner... But, it is equally affected by this hack.

karlm,

Yes, this hack has that bug too. I have fixed it immediately when NeutralizeR reported issue (v3.5 - Aug 30. 2006.). I have sent update info to users who have installed plugin too.

btw that's why it's important that users click "install" when using some hack.

So I'm not blaming another hack/coder for this. I'm just saying that this hack was fixed few days before Staff posted announcement about vulnerabilities (Sep 2nd 2006.). Small number of sites with Cyb Stats installed could be "hacked" except they didn't installed hack here and didn't received info about it's updates.

I didn't know it's fixed. Thanks for the info.

I said it's unsupported because there was no any updates for a while.

InfiniteWebby, respected author of TopXStats hack, said also:

Regards,

Cybernetec

Installed, thank you :)
suggestion: option to show the latest thread in the same way latestopic,
can be useful when someone whas not at board for a time
an one other, option to exclude some user (with user id in the same way to exclude forum)
from top stat, this where nice to have the forumteam out and leave this just for regular user

Nice Mod everything is working fine even the things with placing the stats where i want them. Nice work - Thanks

Got a question ... i like to edit the Language on the Titles ... Like TOP 10 an so on ... where can i edit them...??!

Cant find it... or i am just looking too much on this screen ... :)

Thanks 4 help.

Greetings Drjot

Edit: just got it under "Plug - ins" " Cyb - Advanced Forumhome Statistics - FH" i hope so :)

Edit: no was wrong.... argh... help pls :)

As for all language changes search for it in Phrase Manager. :)

Great... that simple... and i was looking in nearly every Template :)

Thats the way we use to learn things ...

Thanks!

greetings from germany

I have to give props Cybernetec, as I did recieve the E-mail regarding the security update Friday evening...I put it on the "to do" list for the weekend (usually Sunday is when I have time for general maintenance), and I got hit Saturday afternoon.

I think what Cybernetec was trying to say is that he was doing his best to keep his version of forum stats up-to-date with the security issue. I got notified by E-mail by Cybernetec on Friday , and I didn't act on it immediately. That was nobody's fault except my own.

I'm still using it (now that I upgraded it) and enjoying the it, in addition that it was a real easy install & upgrade.

LOL!...I just had another script kiddie from turkey (all these lamers using that code have been from Turkey), try an attempt it while writing this very post, and even though I installed some additional code to prevent any variations, this hack now upgraded has no problem. https://vborg.vbsupport.ru/external/2011/01/19.gif

I can't believe these little idiots are still attempting it...I would be to embarrased in the first place to use that script kiddie code (I doubt they even know what meta refresh even is), but then to give out their name and websites in the post and redirect on top??...but hey, I guess even lamers have no standards. ;)

The only thing I would have suggested Cybernetec, is I think I would have chosen something a little more dramatic than "small" security bug fixed. ;)

*clicks install*

future release going to have usergroup permissions ?

I did click the 'installed' link, but upon removing it "temporarily" from my index, i followed accordingly by clicking the 'uninstalled' link too.
My apologies for my own ignorance, I had received an email regarding the update - but alas it was in my junk thanks to Norton... Anyhow, I reinstalled the update and a third hacker has attempted to hack - this time, I'm glad to say, without any success :D