Sure - but where is the release Thread so i can add it to "My installed Hacks" ?

The thread you are refering to is this one.

Most modifications for 3.5.x will work on 3.6.x

Thanks for the update to 3.6! Works like a charm. :)

Working good on my 3.6.0.

Would like to intergrae this somehow in my sidebar.. Not sure how id go about it mind.

oh, i tried to do that... never worked :hurt:

Why not opened a new Thread at 3.6 Section ?

Because this is not my modification, and apart from a couple of additional phrases, it is just the original one. To release requires permission from the original author, and also then requires support, which I just don't have enough hours in the day to provide for something identical to the original apart from those phrases.

Is it possible to make this work at the bottom of vbadvanced cpms?

Thank you thank you thank you for the 3.60 version! *phew*

Nice work ...Installing now ..

The 3.6 Fix causes a Error. If a Thread has moved it is displayed twice but only the Link to the real Thread works.

Interesting i just did that and i don't see anything.
________
600

You may wish to try Advanced Forumhome Statistics:
https://vborg.vbsupport.ru/showthread.php?t=122986

Works with vBulletin 3.5.x/3.6.x.

working perfectly on 3.6!

It does work with 3.6.0 with a minor issue...

The "Member" Title is missing for some reason... Any Idea how I can rectify this issue?

Please see the Attachment for more info.

See this post for the solution.

Excellent, Works! thankyou!

Might be a security problem with people putting in meta tags using possible flaw in this on 3.6.0.

Might want to disable for now until a fix is made, or you leave yourself open to so called "hackers"...or better yet...lamers.

yep you right i was hacked and was able to fix it in time and later was told that this hack has a opening so i unistalled it completely

apparently there's a fix for that opening that hackers can get into didn't see this till now

https://vborg.vbsupport.ru/showpost....&postcount=250

Is that announcement about your hack?! or other hack?!

http://www.vbulletin.com/forum/showthread.php?t=198902

Hackers?
Because of this module..

Well we need a update for 3.6.0 until then I will not use it because yesterday I had enough attacking from the lamers

ill report the mod this way admins can take a look and if there is a exploit they will usually patch it.

did you apply the patched version? that the staff fixed? and if so were still hacked or what happen?

Unfortunately, it seems that a 3.6 product version posted in this thread (in July) was based on version 1.2.1 (i.e. not 1.2.1a) so did not have the security fix built in to it. That version has now been removed and a fixed version product (1.2.1c) for vb 3.6 is attached to this post. Anyone who installed the previous 3.6 product should upgrade to this version.

thanks paul

Have you managed to get rid of the meta refresh bug on script?

http://www.vbulletin.com/forum/showthread.php?t=198968

for more info...

i trust pauls post as he has fixed alot of scripts and i know he was the one who posted the last fix so im sure its all fixed now.

I have applied the fix posted here ;

https://vborg.vbsupport.ru/showpost....&postcount=250

To both versions (3.5 was done in July, the unofficial 3.6 version today).

AFAIK, this fixes the problem you are referring to.

thank you Paul ..

One more thing I hope if you replace the first post attached .zip file with your patched one .

The main zip (for 3.5) was patched in July.

Hello Everyone,

I understand there is a security vulnerability - http://www.vbulletin.com/forum/showthread.php?t=198902, were we are being told to uninstall Top X Stats.

I would rather keep this mod so I am wondering if this issue has been addressed. I see from previous posts that there has been some security issues addressed but no sure if it is this one.

I am running vb 3.5.4 and Top X Stats 1.2.1a

Is there something I need to do here to get the most secure version for vb 3.5.4.?


Thank You,


Nuguru :)

I was in the process of disabling this since I followed your link about security and I got a new user on my forum named ANTHRAX.

Then the user posted "hacked by ANTHRAX" for their one and only post.

thanx paul!

Does that code work for 3.5.2 and 3.5.4 boards ? as my 3.5.2 one got hacked but i have added a new code in newthread.php taken from vb forum after i got my site back.

hmm teepeg would that be what i posted?

Hello,

It's a shame to hear that we are incountering a security problem with Top X Stats and I am in the process of finding the solution to ensure that 1.6.1a is secure for my vb 3.5.4. Any help would be appreciated.

In addition, I was wondering if there has been any recent security issues with VBStatExtended since it seems to be a very similar mod to Top X Stats?


Thanks in Advance,

Nuguru :)

<a href="https://vborg.vbsupport.ru/showpost.php?p=1066969&postcount=6" target="_blank">https://vborg.vbsupport.ru/showp...69&postcount=6</a> read that man