[stan111]

Originally Posted by Wild-Wing

ok this has happend twice on the forum i admin on and its a stupid exploit in the thread titles that allows meta reditection. im not going to say how its done but ill pm you what to look for.

heres a fix for it
find in newthread.php:
if ($_POST['do'] == 'postthread')

then find:
'subject' => TYPE_STR,
change the TYPE_STR to TYPE_NOHTML

i am using 3.0.7
i do have this if ($_POST['do'] == 'postthread')

but the rest r like this

globalize($_POST, array('posthash' => STR_NOHTML, 'poststarttime' => STR_NOHTML));

	if (isset($_POST['WYSIWYG_HTML']))

nothing like 'subject'

please show me a way to fix this

i have the top 5x stat on my forum