The Arcive of Official vBulletin Modifications Site.

login.php phishing patch · **Released**: 06-02-2011

Due to the recently announced Possibly Phishing Vector

I made a small/short patch which should stop a user from being exploited.

I've tested this internally and it seems to do the job.

GeekyDesigns · #2 06-02-2011, 10:57 PM

If there are other pages, that this can cause problems on, please let me know and I'll see what I can do to resolve it.

Special Pages · #3 06-02-2011, 11:45 PM

I'm using this for sure. Is this tested and working?

Zachery · #4 06-03-2011, 12:03 AM

I tested it as much as I could internally, it shouldn't ever impact normal users, only if someone, or something tries to pass url=X in the url.

MagicThemeParks · #5 06-03-2011, 12:26 AM

Will this work with all versions of vB?

Zachery · #6 06-03-2011, 12:58 AM

This should work on any version of vB4, the hook point im using I'm moderately sure isnt available in vb3.5-8

SuperTaz · #7 06-03-2011, 01:08 AM

Nice. Thank you.

Boofo · #8 06-03-2011, 01:56 AM

Quote:

Originally Posted by Zachery

This should work on any version of vB4, the hook point im using I'm moderately sure isnt available in vb3.5-8

init_startup is in init.php in 3.8.0. Not sure about earlier.

eJM · #9 06-03-2011, 03:16 AM

How will this affect things like VigLink?

Wonksta · #10 06-03-2011, 03:59 AM

Quote:

Originally Posted by eJM

How will this affect things like VigLink?

x2

AND - Does this phising vulnerability effect vB3.8.6?

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.05450 seconds Memory Usage 2,310KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (2)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (4)navbar_link (120)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (10)post_thanks_box (3)post_thanks_box_bit (10)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit (10)post_thanks_postbit_info (9)postbit (1)postbit_attachment (10)postbit_onlinestatus (10)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start fetch_musername post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end post_thanks_function_fetch_thanks_bit_start post_thanks_function_show_thanks_date_start post_thanks_function_show_thanks_date_end post_thanks_function_fetch_thanks_bit_end post_thanks_function_fetch_post_thanks_template_start post_thanks_function_fetch_post_thanks_template_end postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_attachment postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

3 благодарности(ей) от:
eva2000, Mark.B, Zachery

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!