Topic awaiting preservation: phpBB SQL Injection Bug (Page 1 of 1)

Heyho,
all of you using phpBB should look into this
and apply the necessary patch, before an evil hacker comes along and steals all your (encrypted) passwords ;-)


pretty bad actually. I'd had made you sponsor a cake if you wrote that piece of original code (the variable checking) on anything I'm in charge...

TP: Thanks for spotting that. I've updated things.

If anyone is using phpBB and is a little nervous about tinkering with the code then (as well as 'stop being a girl scout and get stuck in') I can provide an updated copy of that file from version 2.0.4 but it needs to get fixed.

___________________
Emps

FAQs: Emperor