 |
|
|
Mod Options |
login.php phishing patch Details »
|
|||||||||
Due to the recently announced Possibly Phishing Vector
I made a small/short patch which should stop a user from being exploited. I've tested this internally and it seems to do the job. Download Now Only licensed members can download files, Click Here for more information. Supporters / CoAuthors Show Your Support
|
|||||||||
About Developer
Visit Web Site
Not Supported 
Uses Plugins| Comments |
|
#2
03 Jun 2011, 00:57
|
||||
|
||||
|
If there are other pages, that this can cause problems on, please let me know and I'll see what I can do to resolve it.
__________________
The Geeky Designs team is proudly bringing you awesome addons and styles! No members have liked this post.
|
|
#3
03 Jun 2011, 01:45
|
|||
|
|||
|
I'm using this for sure. Is this tested and working?
No members have liked this post.
|
|
#4
03 Jun 2011, 02:03
|
||||
|
||||
|
I tested it as much as I could internally, it shouldn't ever impact normal users, only if someone, or something tries to pass url=X in the url.
__________________
Looking for ImpEx?
No members have liked this post.
|
|
#5
03 Jun 2011, 02:26
|
||||
|
||||
|
Will this work with all versions of vB?
__________________
No members have liked this post.
|
|
#6
03 Jun 2011, 02:58
|
||||
|
||||
|
This should work on any version of vB4, the hook point im using I'm moderately sure isnt available in vb3.5-8
__________________
Looking for ImpEx?
No members have liked this post.
|
|
#7
03 Jun 2011, 03:08
|
||||
|
||||
|
Nice. Thank you.
No members have liked this post.
|
|
#8
03 Jun 2011, 03:56
|
||||
|
||||
|
Originally Posted by Zachery
init_startup is in init.php in 3.8.0. Not sure about earlier.
No members have liked this post.
Last edited by Boofo; 03 Jun 2011 at 04:01.
|
|
#9
03 Jun 2011, 05:16
|
||||
|
||||
|
How will this affect things like VigLink?
__________________
Always a work in progress: The Floor Pro Community No members have liked this post.
|
|
#10
03 Jun 2011, 05:59
|
|||
|
|||
|
Originally Posted by eJM
x2
AND - Does this phising vulnerability effect vB3.8.6? No members have liked this post.
|
|
#11
03 Jun 2011, 13:50
|
|||
|
|||
|
Did I install this wrong?
Product: vBulletin Hook Location: init_startup Title: Login php phishing patch Execution Order: 5 Plugin PHP Code: paste text of xml file here I got a blank screen when I clicked the What's New button. No members have liked this post.
|
|
#12
03 Jun 2011, 16:16
|
|||
|
|||
|
Installed with thanks on 4.1.3 ....
Regards, Doug No members have liked this post.
|
|
#13
03 Jun 2011, 19:19
|
||||
|
||||
|
Originally Posted by worried
You should just install it.
__________________
Looking for ImpEx?
No members have liked this post.
|
|
#14
03 Jun 2011, 22:04
|
|||
|
|||
|
Originally Posted by worried
probably you copied along a character that shouldn't be there and that is causing a blank page No members have liked this post.
|
|
#15
05 Jun 2011, 17:33
|
||||
|
||||
|
Originally Posted by eJM
I did not notice your question eJM, it shouldn'y have any effect what so ever on viglink or skimlinks. It only stops the &url varible from working on a very tiny portion of your site.
__________________
Looking for ImpEx?
No members have liked this post.
|
|
«
Previous Mod
|
Next Mod
»
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Mod Options | |
|
|
| New To Site? | Need Help? |
All times are GMT. The time now is 04:10.
Powered by vBulletin® Version 3.8.14
Copyright © 2021, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright © 2021, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Design by Princeton
Copyright ©2001 - , vbulletin.org. All rights reserved.
vBulletin® is a registered trademark. 