4images Forum & Community
4images Help / Hilfe => Bug Fixes & Patches => Topic started by: kai on July 16, 2013, 06:17:58 PM
-
We've been reported (thanks to jakovits) a cross site scripting vulnerability in 4images 1.7 - 1.7.11.
To fix this:
In global.php
find
$string = preg_replace('#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base)[^>]*>#i',"",$string);
and replace it with
$string = preg_replace('#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base)[^>]*(>|$)#i',"",$string);
-
Why the heck are posts deleted here???
-
Why the heck are posts deleted here???
Weil deine Frage in einen völlig falschen Thread ist, auserdem wurde dein Post nicht gelöscht sondern verschoben:
http://www.4homepages.de/forum/index.php?topic=31356.0
mfg Andi
-
Richtig, wie Rembrandt es schreibt