Nah it doesnt have anything to do with php5 , The zip_open function that gives you the error has to be compiled into the php/apache core, When i wrote the installer i tested it on three machines with different hosting companies and assumed that most hosts did this by default, im currently working on a fix and should hopefully have something in the next couple of days, I'll forward it to MrZero when i have the fix so he can forward it on.
Them being on your old board wont make a difference as a zip file is a zip file regardless of php/vb version
Can I volunteer for beta testing, please? We just got hit by someone trying to use the password exploit. :nervous:
Quote:
Originally Posted by dina
I don't see any remarks being made on the recent exploit they have found in the mod (it involves index.php and the ability to extract the password for any member on the board by entering a sql query in the URL ending with user id).
I saw this on a newsgroup today, but haven't seen it here so far.
has been there not long after the exploit was posted on securityfocus
If theres a vulnerability in ibProarcade that affects both vB and IBP then you will find a patch posted at ibproarcade.com quite soon after publication of said vulnerability
I still dont know what they can do with a vB hashed pass unless they can also union a url login bypassing the vB scripted hashing
has been there not long after the exploit was posted on securityfocus
If theres a vulnerability in ibProarcade that affects both vB and IBP then you will find a patch posted at ibproarcade.com quite soon after publication of said vulnerability
I still dont know what they can do with a vB hashed pass unless they can also union a url login bypassing the vB scripted hashing
I don't even see that in my mod_report.php file...
11-08-2005, 05:30 AM
Linear Mode
