[Neo_obs]

Originally Posted by LuucEarth

Found another bug fix in the Post bit Display.

Line 191 - 193 of String.php (Helper Folder)

    if($regexp)
    {
      return (preg_match("/" . $pattern . "/i", $this->string)) ? TRUE : FALSE;
    }

This throws an error when Unique ID's have a / in them

Fix:

    if($regexp)
    {
       $pattern= preg_quote($pattern, '/ ');
      return (preg_match("/" . $pattern . "/i", $this->string)) ? TRUE : FALSE;
    }

Without the preg-quote there could be a serious security vulnerability in some situations.

If you allow users to set their own UID and have postbit on/offline notification turned on it calls this function.
Someone could put a highly recursive Regex pattern in place of their Unique ID and cause a CPU Cycle related DoS

That is actually part of the framework I use... I will let the developer know and add this to my release now.