Search options (Page 261 of 307)

Well, I found the rule (or a ruleset containing it)
http://www.gotroot.com/downloads/ftp/mo … rules.conf

#PunBB version <= 1.2.2 auth bypass exploit
SecFilterSelective REQUEST_URI "profile\.php\?section=admin\&id=.*\&action=foo"

I can't find any "auth bypass" that existed that would be prevented by that line.

No, there is no such exploit, nor is it possible through PunBB's code as far as I can tell (especially with the protection Rickard added in 1.2.9)
A couple possibilities:
The guy figured out your password and is logging in as you to unban himself
The guy can access your DB
Your PunBB isn't fully updated. He's using an exploit that you didn't fully patch to gain access.

Now, three things that might help you:
1. Upgrade to 1.2.10
The removal of reliance on X_FORWARDED_FOR means it becomes harder for him to fake his IP
2. Change yout password to something complicated and hard to figure out
3. If you have access to the access_log, paste us the relevant parts and we can try and figure out if it was actually an exploit

Yeah, Sulfur is the default error style

There's not a script that lets you add a new page, but you can add links in Admin Options (additional navlinks)

I have ICQ and AIM (silly, I know, to run both when ICQ #s work with AIM and AIM nicknames work with ICQ), I know people who use that and Jabber (usually through Google Talk) and MSN
But most people don't need all of them at once: they just need some of them. But take a group of people, probably at least one person will have used each one

Raybo: Like I said to you before, I wrote a plugin for you to do just that: and I wasn't the only one

Paul: exactly my point, print out the whole post and let the stylesheet decide how much people "see"

Rickard: except all of the post is shown, it's just "hidden" by the div

Probably something where you give it a user agent/IP list and if a guest matches that, they get fed a certain style and are marked as a certain bot

Try this:

  $data = shell_exec('uptime');
  $uptime = explode(' up ', $data);
  $uptime = explode(',', $uptime[1]);
  $uptime = $uptime[0].', '.$uptime[1];

Edit: My mistake, basically $load_averages is filled with the results

Try removing the @ from exec('uptime')

One question: why?
Oh, and this should be in Show Off