I complete my search with $_GET['p'] , ['p'] , $p = and didn't find nothing in my MODS so it's ok for me because I remember that I did the changes !is_numeric($_GET['p']) || when I updated my forum to 1.2.20

Thanks again...

With a little soft I did a search in my MODS's files and didn't find an $p variable, but maybe I do wrong... It's easy for me to search any word or line in any folder just with one clic so tell me if $p is enough or if I need to search something else...

Looks like it is all OK with your forum (regarding the possible issues related the forum's core).
(This is an example of where there was lack of value checks: http://punbb.informer.com/trac/browser/ … t.php#L128.)

Good luck.

With a little soft I did a search in my MODS's files and didn't find an $p variable, but maybe I do wrong... It's easy for me to search any word or line in any folder just with one clic so tell me if $p is enough or if I need to search something else... Thank you for your patience

P.S : the soft I use is free, helpfull and is named PRGrep

I'm sorry but I don't understand what you mean by "page number set by PunBB"
I am using some MODS so what do I need to search and change into my files ? can you be more explicit please ?

PunBB sets the $p (page number) variable from the GET-parameters.
If one of your mods uses this $p variable, it should do it's own checks for the value or at least force this variable to be integer.

This bug cannot be used directly in PunBB 1.2, but can appear in mods using the page number set by PunBB: check your mods for the correct page number screening.

Hi,

I'm sorry but I don't understand what you mean by "page number set by PunBB"
I am using some MODS so what do I need to search and change into my files ? can you be more explicit please ?

Regards.

can u point me to the thread that gives more details about this?

Try this instruction for PunBB updates or this article for the general idea.

sourabh wrote:

i used this archive (http://punbb.informer.com/download/punb … _files.zip)

The same idea.
Though, it would be easier to you to apply the patch, if you have many mods installed.

can u point me to the thread that gives more details about this?

i used this archive (http://punbb.informer.com/download/punb … _files.zip)

The same idea.
Though, it would be easier to you to apply the patch, if you have many mods installed.

sourabh wrote:

hmm i got the point. one more thing...i updated 1.12.17 to 1.12.20. will this update have all the changes that were in 1.12.19 update?

You mean you used the 1.217 to .20 patch. Yes, it must include all the changes: 1.2.17->.18->.19->.20.

i used this archive (http://punbb.informer.com/download/punb … _files.zip)

hmm i got the point. one more thing...i updated 1.12.17 to 1.12.20. will this update have all the changes that were in 1.12.19 update?

You mean you used the 1.217 to .20 patch. Yes, it must include all the changes: 1.2.17->.18->.19->.20.

sourabh wrote:

i don't understand, so many files to update just to change copyright info. why its so important? i have many mods installed with punbb. i had to update every file manually.

See this post

hmm i got the point. one more thing...i updated 1.12.17 to 1.12.20. will this update have all the changes that were in 1.12.19 update?

i don't understand, so many files to update just to change copyright info. why its so important? i have many mods installed with punbb. i had to update every file manually.

See this post

changelog http://punbb.informer.com/download/chan … 1.2.20.txt => 404 :rolleyes:

Fixed. Thanks! ))