I dont know if John has posted it in the members area yet or even finished the announcement but anways.
Bug Fixes
- Main Directory:
- editpost.php; use a new function to strip session hash
- member.php; fix XSS issue
- member2.php; fix XSS issue
- memberlist.php; fix XSS issue
- online.php; 2 semi colons instead of 1
- register.php; no username in modeation email
- search.php; fix XSS issue
- sendtofriend.php; fix a security problem with emailing users
- Admin Directory:
- misc.php; orphan thread wont select ids
- Mod Directory:
- moderate.php; remove hardcoded link to forumdisplay.php
Files changed: (from 2.2.9 RC)
- Main Directory: editpost.php, member.php, member2.php, online.php, register.php, search.php, sendtofriend.php
- Admin Directory: admin/misc.php
- Mod Directory: mod/moderate.php
get the latest version from the members area
http://www.vbulletin.com/members/