Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
southern
Client


Joined: Jan 29, 2004
Posts: 591
Location: Texas

PostPosted: Sun Jul 18, 2004 4:49 pm Reply with quote

I noticed that a number- every one I've checked- of my inactive blocks show this:
Code:


Block Activation
An RSS block
This is the preview for Block Security Tracker
Security Tracker
 
·PHP strip_tags() Can Be Bypassed By Remote Users With Tags Containing 

Do you want to Activate this block?
[ No | Yes ]



This is the preview for Block Collapsing Forums
Collapsing Forums 

·PHP strip_tags() Can Be Bypassed By Remote Users With Tags Containing 

Do you want to Activate this block?
[ No | Yes ]
 
 
 
This is the preview for Block Sentinel ™
Sentinel ™
 
·PHP strip_tags() Can Be Bypassed By Remote Users With Tags Containing 

Do you want to Activate this block?
[ No | Yes ]

when I click on Activate in my admin area. Of course I don't want that showing on my site so they remain inactive. I first noticed it a few days ago- the Security Tracker RSS feed warned about the strip tags() thingie- and it showed in a few blocks I had active. The line seems to be present in all of my inactive blocks both standard and addon, but how could an RSS feed leak into unrelated blocks? The block-Sentinel™ btw has nothing to do with Sentinel™, it is only an image block I was playing with. This is a strange issue, and annoying since I can't activate the affected blocks. What I've done to remedy it is to upload chatserv's patched blocks and overwrite the affected ones, but some blocks I'll have to re-download...
 
View user's profile Send private message Visit poster's website MSN Messenger ICQ Number
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©