The Arcive of vBulletin Modifications Site.

login.php phishing patch · **Released**: 06-02-2011

Due to the recently announced Possibly Phishing Vector

I made a small/short patch which should stop a user from being exploited.

I've tested this internally and it seems to do the job.

GeekyDesigns · #2 06-02-2011, 09:57 PM

If there are other pages, that this can cause problems on, please let me know and I'll see what I can do to resolve it.

Special Pages · #3 06-02-2011, 10:45 PM

I'm using this for sure. Is this tested and working?

Zachery · #4 06-02-2011, 11:03 PM

I tested it as much as I could internally, it shouldn't ever impact normal users, only if someone, or something tries to pass url=X in the url.

MagicThemeParks · #5 06-02-2011, 11:26 PM

Will this work with all versions of vB?

Zachery · #6 06-02-2011, 11:58 PM

This should work on any version of vB4, the hook point im using I'm moderately sure isnt available in vb3.5-8

SuperTaz · #7 06-03-2011, 12:08 AM

Nice. Thank you.

Boofo · #8 06-03-2011, 12:56 AM

Quote:

Originally Posted by Zachery

This should work on any version of vB4, the hook point im using I'm moderately sure isnt available in vb3.5-8

init_startup is in init.php in 3.8.0. Not sure about earlier.

eJM · #9 06-03-2011, 02:16 AM

How will this affect things like VigLink?

Wonksta · #10 06-03-2011, 02:59 AM

Quote:

Originally Posted by eJM

How will this affect things like VigLink?

x2

AND - Does this phising vulnerability effect vB3.8.6?

3 благодарности(ей) от:
eva2000, Mark.B, Zachery