(Link to AcmlmWiki) Offline: thank ||bass
Register | Login
Views: 13,040,846
Main | Memberlist | Active users | Calendar | Chat | Online users
Ranks | FAQ | ACS | Stats | Color Chart | Search | Photo album
06-03-24 01:29 AM
0 users currently in Programming.
Acmlm's Board - I3 Archive - Programming - Bug/hole fixes
  
User name:
Password:
Reply:
 
Options: - -
Quik-Attach:
Preview for more options

Max size 1.00 MB, types: png, gif, jpg, txt, zip, rar, tar, gz, 7z, ace, mp3, ogg, mid, ips, bz2, lzh, psd

UserPost
Elric
Posts: 2/164
I use v1.92, and this is what I have under if($action == "saveprofile") { section:

if($sex>2) $sex=2;
$loguserid = intval($loguserid);
$useranks = intval($useranks);
$sex = intval($sex);
$postsperpage = intval($postsperpage);
$threadsperpage = intval($threadsperpage);
$viewsig = intval($viewsig);
$tlayout = intval($tlayout);
$icq = intval($icq);
$timezone = intval($timezone);
$markfo = intval($markfo);
$pemail = intval($pemail);
$signsep = intval($signsep);
$sscheme = intval($sscheme);
$posttool = intval($posttool);

That's not everything that's in that section, of course, but it plugs a lot of holes.
Xeo Belmont
Posts: 14/1016
Also after $loguserid = intval($loguserid);, add
$pemail = intval($pemail);
$signsep = intval($signsep);
$sscheme = intval($sscheme);
$posttool = intval($posttool);

That might just be 1.A(x) bug, but who knows.
Deleted User
Posts: 19/-7750
This is how to fix the editprofile.php hole in 1.A2.

First, find:
$sex = intval($sex);

And under it add this:
$loguser[icq] = intval($loguser[icq]);
$loguser[timezone] = intval($loguser[timezone]);
$posttool = intval($posttool);
$pemail = intval($pemail);
$icq = intval($icq);

That should take care of it. If something is wrong with that, please notify me because that's how I've been fixing it all along.
Yoshi Dude
Posts: 18/1408
Originally posted by DS_MaSTeR
Originally posted by Yoshi Dude
So are any of you going to share any information, or do you think I'm just polling you?


What do you mean info? You mean like share on what we know on how to fix holes? If so, then I have some stuff.
Yes!
Of course I haven't gotten an answer on the 1.92+ thing.. but it'd be nice.

Am I the only one who would appreciate this?
Deleted User
Posts: 15/-7750
Originally posted by Yoshi Dude
So are any of you going to share any information, or do you think I'm just polling you?


What do you mean info? You mean like share on what we know on how to fix holes? If so, then I have some stuff.
Arthus
Posts: 9/142
I think this board will be one step ahead like all the others were... So when 1.93+ comes to AB, maybe 1.92+ will be released to the public.
Yoshi Dude
Posts: 17/1408
So are any of you going to share any information, or do you think I'm just polling you?
Arthus
Posts: 6/142
I'm not sure if it would be all the holes, I'm sure there is a hole that no-one has found yet...
Deleted User
Posts: 6/-7750
I know how to fix all of the holes in 1.92
Arthus
Posts: 1/142
I could probaply fix the holes if I knew what they were, It could also help if I knew how to hack...
Deleted User
Posts: 2/-7750
I could help you with that! But I need some help fixing all the holes in 1.92 because I have a board set up with it but I'm afraid to use that one since I have no idea how to fix the holes in it. I've done pretty well with 1.A2 though.
Xeo Belmont
Posts: 1/1016
My god my board is going to be the Death Egg.

I went from 1.92 to Acmlm+Erk 1.45 and successfully converted that (which, was freaking hell) to 1.A2 to 1.A3.

Now I need to reverse.
Yoshi Dude
Posts: 15/1408
Will this 1.92+ be released to the public, or at least the fixes made? It'd be nice, especially with how knowledge of holes has spread since the last release.

If Xkeeper won't do that, maybe this can be a designated thread for helping others protect their board. I'm surprised this issue was not addressed much before.. any newbie can get screwed over pretty easily now.
Acmlm's Board - I3 Archive - Programming - Bug/hole fixes


ABII

Acmlmboard 1.92.999, 9/17/2006
©2000-2006 Acmlm, Emuz, Blades, Xkeeper

Page rendered in 0.012 seconds; used 352.33 kB (max 405.73 kB)