vBulletin 3.0.6 Critical Update, and a Bug Fix for 3.0.6

[Erwin]

vBulletin 3.0.6 has been released:
http://www.vbulletin.com/forum/showthread.php?t=127027

It fixes an XSS security hold in bbcode parsing so you should at least upload the latest patched /includes/functions_bbcodeparse.php

However, there is a serious bug in the 3.0.6 /includes/functions_bbcodeparse.php file.

This causes this error:

Warning: sprintf(): Too few arguments in /includes/functions_bbcodeparse.php on line 327

Unable to add cookies, header already sent.
File: /includes/init.php
Line: 27

This happens when you are trying to view a thread with custom bbcode.

To fix this, do this:

In functions_bbcodeparse.php, find:

PHP Code:

    return sprintf($return, $param, $option); 


ABOVE IT, ADD:

PHP Code:

    $return = preg_replace('#%(?!\d+\$s)#', '%%', $return); 


Bug description and fix located here:
http://www.vbulletin.com/forum/bugs....iew&bugid=3678

I'm not sure whether the latest 3.0.6 release has this fix in it so I'm posting this manual fix just in case.