Search options (Page 296 of 307)

I had to take my own, home-made version of this mod and throw it out: I had an admin only forum that I realized mods could read from if they were bored enough to go through all possible ids using edit or delete.

Nope, I checked the code and there just isn't a check (other then for guests)

Just remove all other styles (or keep them in another folder, in case you change your mind)

A split topic mod was made, just not for 1.2.x yet

Yup, I got that too: and I couldn't upload (but that's unrelated)

Change
<?php echo $lang_uploads['Uploader']; ?>
to
<?php echo 'Uploader'; ?>

1. Yes, that's how it should work
2. You can prevent it by going to Admin -> User Groups and changing the Members usergroup setting for Delete topics from on to off

Jonex: Converters are made because people want to leave a forum, when there's a demand for them

No problem Rickard, always a pleasure to help out

lol, that's what the mod does

- Moving
- Edit the first post

OK, this is HUGELY abusable with SQL injections. :-/
Until this is fixed, I would suggest anyone who has it installed on a publicly accessable site pull it down temporarily.

SQL injection basically means that it is possible to manipulate one or more variables in a way it wasn't intended, usually for malicious purposes. It is usually possible due to a lack of checking.

Example (lets say we're viewing stats on a user):

select * from user where id = $_GET['id']

I don't check that $_GET['id'] is a number (or do a simple intval()). That means that I could do this

select * from table where id = 0 union select password,password,(etc, however many columns there are) from table where id = [person I want to hack's ID]

If the passwords aren't hashed, I can just login as normal. If they are, the hashes can still be exploited in certain situations. And I could do this for any variable on any table.

However, it's easily fixed in this case. Where-ever you are taking in data from the outside that should be a number, make sure that it is, using something like this:
$var = intval($_GET['var'])
where var is the variable name.

hehe, syntax highlighting is a great tool for debugging