[viper357]

ban the ips trying to hack

Yip, I've done that in the admin panel, thanks.

and update to 3.8.7 Patch Level 2

Yeah I need to do that one day, it's just I've got so many manually edited templates, lol.

--------------- Added [DATE]1334858362[/DATE] at [TIME]1334858362[/TIME] ---------------

Originally Posted by kh99

There's a slight issue in that mod, in that if you pass a string as the 'page' parameter it becomes page 0 and generates a starting LIMIT in the query of -20 which is invalid (first page is 1 so 0 is invalid). But that doesn't create a security issue, and even if it did allow you to modify the sql, putting a file name there wouldn't read the file. So I don't think you have anything to worry about.

BTW, the ip address in the above error is mine, so please everybody don't start banning me.

Ok, thanks for the help. Sorry about the IP address , I've removed it from my post.