Page 1 of 1

new bug found in IM Portal <= v1.2.0

PostPosted: Tue Sep 26, 2006 9:13 am
Author: sasan
hi this is a new bug in (phpbb_root_path) of IM Portal


Code: Select all
Bug in : includesfunctions_portal.php##Vlu Code :#--------------------------------##            include_once($phpbb_root_path . 'includes/lite.'.$phpEx);##


patch this

Re: new bug found in IM Portal <= v1.2.0

PostPosted: Tue Sep 26, 2006 1:32 pm
Author: Michaelo
The php_root_path is set prior to calling this line of code therefore this should be safe, you could however add
Code: Select all
 if ( !defined('IN_PHPBB') ){     die("Hacking attempt#27");}  

to the lite.php file as line 28.
Mike