Please read and comment on this very important topic. Thanks!

Note: Requires PHP-Nuke 6.9 or newer
Changelog:
Fixed several vulnerabilities in modcp - Robert Lavierck
Changed whois lookup address within admin index
Fixed potential vulnerability in viewtopic postorder - 2.0.6d
Updates to cope with Zend Optimizer 2.5 problems - 2.0.6d - jetset
Force specialcharing of redirect variable in login - Pit
Fixed potential vulnerability in viewtopic postdays - GulfTech Security Research
Fixed potential vulnerability in viewforum topicdays - GulfTech Security Research
Fixed potential vulnerability in modcp
Fixed potential vulnerability in avatar gallery
Database upgrade instructions: Upload the included updatedb.php file to where mainfile.php is located and point your browser to it, once done delete the file.
Download here.

[Admin Note] As of 3/16/2004 This update pack has been applied to the phpnuke 7.1 distribution available here.

UNBELIEVABLE!

Here is a direct quote from Franco Burzi, the current keeper of phpnuke, from his phpnuke.org 'club' site

"NOTE: Being a member doesn't give right to you to receive technical support. PHP-Nuke is distributed AS IS without warranty and without technical support. Any technical support email will be ignored."

Have you seen the new site? Read his new policy on releases? Read on for the entire 'announcement' lifted verbatim, from his front page. Read More...

scottr writes:  

IP Tracking displays visitor's online status, who visited your site, when, how many times, and what pages they viewed.
Just overwrite the files if you already use IP Tracking.
New installation requires adding 1 line of code mentioned in README file and 1 table creation.

Get it and see it (No registration required)
more language files needed too.
Read more for changes in this release...
p.s. i finally created a forum topic for IP Tracking, my first forum topic. Read More...

64bitguy writes:  

In an effort to help other PHP-Nuke sites uniquely identify all versions of the Mozilla Firefox browsers, I have modified the statistics module and associated code.

For a demonstration of the new comprehensive "Statistics" module, you can visit http://64bit.us/modules.php?name=Statistics Read More...

I have updated my Hack Alert script to v1.1. For those that have already downloaded it, use this code instead in mainfile.php

if (stristr($_SERVER["QUERY_STRING"],'%20union%20')) {
$loc = $_SERVER['QUERY_STRING'];
header("Location: hackattempt.php?$loc");
die();
}