[Marco van Herwaarden]

Originally Posted by YMMOT

Here is an idea. Instead of coming down on the guy that is bringing a security problem to light, Why don't you remove hacks written by a guy that is known to be stealing other vBulletin users databases? The user Lebanon is your problem, not DieselMinded!!!!!

Please do not jump to conclusions and stay with the facts.

Fact: Someone posted on WHM trying to sell a website, for which it is claimed that the owner has "stolen" database(s).
Fact: The person that created the post on WHM claims to be the same person as the coder named "Lebanon" on vBulletin.org.

Unless there is proof of this, or proof that the modifications that are released at vBulletin.org contain mallicious code used to steal databases or passwords, there is nothing here at vbulletin.org to do about this.

Also all there is, is claims that databases are stolen. If/How this is done is totally unclear. As long as that is not known, we do not know where (if?) the alleged security problem is. Warning in general terms without knowing the reason is absolutly not productive and useless.