View Single Post
  #6  
Old 03 Sep 2006, 17:22
Wild-Wing Wild-Wing is offline
 
Join Date: Dec 2005
ok this has happend twice on the forum i admin on and its a stupid exploit in the thread titles that allows meta reditection. im not going to say how its done but ill pm you what to look for.

heres a fix for it
find in newthread.php:
if ($_POST['do'] == 'postthread')

then find:
'subject' => TYPE_STR,
change the TYPE_STR to TYPE_NOHTML

Last edited by Wild-Wing; 03 Sep 2006 at 17:50. Reason: Automerged Doublepost
Reply With Quote