[invisiblea]

Excluding =http will make this mod useless :P

Originally Posted by MrEyes

If you have applied the fix I mentioned earlier you can fix this by using the following exclusions:

$securityexclusions = array(
	'do=viewsubscription',
	'=http'
);

However this mean that you have switched off one of the actual checks and people will be able to pass urls as querystrings. This being said there are alot of mods out there that use this sort of thing and not many hacks that can abuse it. Your call.

There are better solutions, but this would need the entire mod to be reworked. For example the ability to set an exclusion at a page level. So you could exclude viewsubscription for misc.php but not payments.php, and http for redirector.php (vbAnonymizer mod)



This could probably also be fixed by exclusions