IMPORTANT: CRITICAL SECURITY BUG FIX FOR vB3 RC1!
 

Critical Security Bug & Fix

vB3 RC1 downloads have just been suspended.

Please download and upload register.php and login.php here if you have upgraded to vB3 RC1.

http://www.vbulletin.com/forum/showt...86&postcount=4

This also effects vB3 Gamma.

Goes to show you that you should only run the latest stable versions of a product :)

what was the issue ? any one know more information

It was related to checking the password that was entered, there are two lines to change in register.php and one in login.php.

I was wondering where that bug went in the bug tracker .. good thing my vb3 board isn't public yet

Really??? I didn't realize that...

Well not knowing what the bug is, and just looking at the changes bettween RC1 which I downloaded and the patched files, and then looking at my vB3 Gamma files, the lines that changed were the same in vB3 Gamma as they were in the origional RC1, so I've edited them to be safe as I'm not planning on upgrading yet.

The sad thing is that this is going to delay me releasing my hacks. I am about to release my massive admin/ warn/ suspend/ ban hack... but can't do it without RC1. GAH!

You just said that to tease us;) lol.. jk...

does this mean RC1 will not be RC1 anymore ?
a critical bug fix, don't know wether I have to feel happy or sad

[delicate security information removed by Erwin - sorry :) ]

It was being investigated while i was browsing the bug forusm...now its not there :)

[sorry, I edited your message, just in case hackers are reading it. :)]

It is in gamma, but it won't work in gamma.

RC1 is back for download in the member's area. :)

Can't wait for it :)

You should also do a red and yellow flag hack for post to allow them and everyone else to know when they are pushing it or hit the edge.

I'm upgrading my private forums now, and will be releasing all my hacks sometime today. ;)

love to hear that, wait for your hacks, Erwin.

I advice users to just upload those 2 files from the rc1 one
and wait for rc2 later today.

I cant' even access vb.com with out gateway error. :'(

I can't either pixel. For the last five days, I get a "Page cannot be Found" error when I try to access anything on Vbulletin.com.

Does anyone know why this is happening and what is going on with them? I have even tried accessing the link from Google and get the same thing.

It is because of ddos attacks, chance is your IP has accidently been banned. Email support@vbulletin.com about your problem also stating your IP address and they will help you out.


Note RC2 is out