[whodah]

ForceHSS:

Are you sure you are 4.2.2 PL1 ? If so, do your install files fresh from vB not have this?

includes/xml/product-panjo.xml:         if ((!$message = base64_decode($vbulletin->GPC['pm_message']))) {
includes/xml/product-panjo.xml:                 !($pagetext = base64_decode($vbulletin->GPC['html']))

BTW: I thought it might be interesting to note the other base64_(encode|decode) stuff off a fresh 4.2.2PL1 download:

[root@hurley upload]# grep -RIi base64_decode *
asset.php:      $filedata = vb_base64_decode('STRING_REPLACED_BY_WHODAH==');
attachment.php:         $filedata = vb_base64_decode('STRING_REPLACED_BY_WHODAH==');
blog_attachment.php:    $filedata = vb_base64_decode('STRING_REPLACED_BY_WHODAH==');
cron.php:$filedata = vb_base64_decode('STRING_REPLACED_BY_WHODAH==');
includes/adminfunctions_template.php:                           $vbulletin->db->escape_string(vb_base64_decode($stylevardfn['validation'])) . "', '" .
includes/adminfunctions_template.php:                           $vbulletin->db->escape_string(vb_base64_decode($stylevardfn['failsafe'])) . "', 0, 0
includes/adminfunctions_template.php:           $value = vb_base64_decode($stylevar['value'][0]);
includes/adminfunctions_template.php:           $decode[$stylevars['name']] = vb_base64_decode($stylevars['value'][0]);
includes/facebook/base_facebook.php:    return base64_decode(strtr($input, '-_', '+/'));
includes/functions.php:function vb_base64_decode($string)
includes/functions.php: if (function_exists('base64_decode'))
includes/functions.php:         return base64_decode($string);
includes/functions.php:         return ($decode ? vb_base64_decode($return) : $return);
includes/xml/product-panjo.xml:         if ((!$message = base64_decode($vbulletin->GPC['pm_message']))) {
includes/xml/product-panjo.xml:                 !($pagetext = base64_decode($vbulletin->GPC['html']))
picture.php:    $filedata = vb_base64_decode('STRING_REPLACED_BY_WHODAH==');
[root@hurley upload]# grep -RIi base64_encode *
admincp/navigation.php: $name .= '_' . strtolower(substr(vb_base64_encode(TIMENOW),4,4));
forumrunner/push.php:    $msgargs = array(base64_encode(prepare_utf8_string($vbulletin->options['bbtitle'])));
forumrunner/push.php:       $msgargs[] = base64_encode(count($pms));
forumrunner/push.php:       $msgargs[] = base64_encode(prepare_utf8_string($first_pm['fromusername']));
forumrunner/push.php:       $msgargs[] = base64_encode(count($subs));
forumrunner/push.php:       $msgargs[] = base64_encode(prepare_utf8_string($first_sub['title']));
forumrunner/support/Snoopy.class.php:                   $headers .= "Authorization: Basic ".base64_encode($this->user.":".$this->pass)."\r\n";
forumrunner/support/Snoopy.class.php:                   $headers .= 'Proxy-Authorization: ' . 'Basic ' . base64_encode($this->proxy_user . ':' . $this->proxy_pass)."\r\n";
forumrunner/support/Snoopy.class.php:                   $headers[] = "Authorization: BASIC ".base64_encode($this->user.":".$this->pass);
includes/adminfunctions_plugin.php:                                     'validation' => vb_base64_encode($stylevar['validation']),
includes/adminfunctions_plugin.php:                                     'failsafe'   => vb_base64_encode($stylevar['failsafe'])
includes/adminfunctions_plugin.php:                             'value' => vb_base64_encode($stylevar['value'])
includes/adminfunctions_plugin.php:                                             'validation' => vb_base64_encode($stylevar['validation']),
includes/adminfunctions_plugin.php:                                             'failsafe'   => vb_base64_encode($stylevar['failsafe'])
includes/adminfunctions_plugin.php:                                     'value' => vb_base64_encode($stylevar['value'])
includes/adminfunctions_template.php:                                   'validation' => vb_base64_encode($stylevar['validation']),
includes/adminfunctions_template.php:                                   'failsafe'   => vb_base64_encode($stylevar['failsafe'])
includes/adminfunctions_template.php:                           'value' => vb_base64_encode($stylevar['value'])
includes/adminfunctions_template.php:                                   'value' => vb_base64_encode($stylevar)
includes/class_mail.php:                                        if (!$this->sendMessage(vb_base64_encode($this->smtpUser), 334) OR !$this->sendMessage(vb_base64_encode($this->smtpPass), 235))
includes/facebook/base_facebook.php:   * Exactly the same as base64_encode except it uses
includes/facebook/base_facebook.php:   * Exactly the same as base64_encode except it uses
includes/facebook/base_facebook.php:    $str = strtr(base64_encode($input), '+/', '-_');
includes/functions.php:function vb_base64_encode($string)
includes/functions.php: if (function_exists('base64_encode'))
includes/functions.php:         return base64_encode($string);
includes/functions.php:         $string = vb_base64_encode($string);
vb/verticalresponse.php:                    'contents'  => vb_base64_encode($members),
[root@hurley upload]#