4images Forum & Community
Welcome, Guest. Please login or register.
Did you miss your activation email?
August 19, 2018, 10:51:27 PM

Login with username, password and session length
Search:     Advanced search
Togle to toolbar
Translate this page with =>
Translate this page >
* Home Help Search Login Register
 
+  4images Forum & Community
|-+  4images Help / Hilfe
| |-+  Bug Fixes & Patches
| | |-+  [1.7 - 1.7.11] Security fix for XSS issue in global.php
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Print
Author Topic: [1.7 - 1.7.11] Security fix for XSS issue in global.php  (Read 64689 times)
kai
Administrator
Addicted member
*****
Offline Offline

Posts: 1405

Thank You
-Given: 66
-Receive: 199


View Profile WWW
« on: July 16, 2013, 06:17:58 PM »

We've been reported (thanks to jakovits) a cross site scripting vulnerability in 4images 1.7 - 1.7.11.

To fix this:

In global.php

find

1
$string preg_replace('#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base)[^>]*>#i',"",$string);

and replace it with

1
$string preg_replace('#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base)[^>]*(>|$)#i',"",$string);
Logged


Your first three "must do" before you ask a question:
1. Forum rules
2. FAQ
3. Search
Meldric
Pre-Newbie

Offline Offline

Posts: 4

Thank You
-Given: 0
-Receive: 1


View Profile
« Reply #1 on: September 27, 2013, 10:12:56 AM »

Why the heck are posts deleted here???
Logged
Rembrandt
4images Moderator
4images Guru
*****
Offline Offline

Posts: 4187

Thank You
-Given: 116
-Receive: 899

Vienna


View Profile WWW
« Reply #2 on: September 27, 2013, 12:04:14 PM »

Why the heck are posts deleted here???
Weil deine Frage in einen völlig falschen Thread ist, auserdem wurde dein Post nicht gelöscht sondern verschoben:
http://www.4homepages.de/forum/index.php?topic=31356.0

mfg Andi
Logged

Meine 4Images Modifikationen  Now over 100 Modification Online!    Meine 4images Demo Seite


Please do not PM me asking for help unless you've been specifically asked to do so. Such PMs will be deleted without answer. (forum rule #6)
kai
Administrator
Addicted member
*****
Offline Offline

Posts: 1405

Thank You
-Given: 66
-Receive: 199


View Profile WWW
« Reply #3 on: September 27, 2013, 02:33:56 PM »

Richtig, wie Rembrandt es schreibt
Logged


Your first three "must do" before you ask a question:
1. Forum rules
2. FAQ
3. Search
Pages: [1] Print 
« previous next »
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF | SMF © 2015, Simple Machines Valid XHTML 1.0! Valid CSS!
Page created in 0.037 seconds with 19 queries.