phpBB Exploit Patch

[digital]

http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240513

Open viewtopic.php in any text editor. Find the following section of code:
Code:

//
// Was a highlight request part of the URI?
//
$highlight_match = $highlight = '';
if (isset($HTTP_GET_VARS['highlight']))
{
// Split words and phrases
$words = explode(' ', trim(htmlspecialchars(urldecode($HTTP_GET_VARS['highlight']))));

for($i = 0; $i < sizeof($words); $i++)
{


and replace with:
Code:

//
// Was a highlight request part of the URI?
//
$highlight_match = $highlight = '';
if (isset($HTTP_GET_VARS['highlight']))
{
// Split words and phrases
$words = explode(' ', trim(htmlspecialchars($HTTP_GET_VARS['highlight'])));

for($i = 0; $i < sizeof($words); $i++)
{



Don't forget to login to your cpanel and update your installations periodically, go to your Cpanel, Scripts Library or Fantastico Installer find the software and click the UPdate/Ugrade Link for your installation.

* BACKUP BACKUP BACKUP your database first, go to your Cpanel / Backups / Download Create full backup or mysql database backup

We have found some upgrades overwrite image paths.