[1.7.1 / 1.7.2] Security fix for SQL injection in session.php

[V@no]

i can find the
"$this->session_id = preg_replace('/[^a-z0-9]+/i', '', session_id());" in the session file included in the zip file i just downloaded.

Its because that is the line you supposed to replace it with, not to find it....

as of comments spam, we have two mods image validation for comments, consider to use one of them.

[sajwal]

I found that in ver 1.7.3
 the line $this->session_id = session_id();
 is not edited???

Should i make the changes in 1.7.3 also, as security reason?

[V@no]

No, v1.7.3 has different approach.