http://www.icyphoenix.com/viewtopic.php?f=1&t=160&p=1128#p1128
-----------------------------------
Bicet
Thu 24 Aug, 2006 10:56

Re: Security Hole and PhpGlobals
-----------------------------------
[quote user="Antonio Mercurio" post="1113"]I've told you some mounths ago!

http://www.phpbbplus.it/phpbbplus/xs-047-patch-security-issue-di-adminhacks-unofficial-vp15709.html#15709

Search
[code]
$phpbb_root_path = '../';
if( !empty($setmodules) )
{
	include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_admin_hacks_list.' . $phpEx);
	$filename = basename(__FILE__);
	$module['Info']['Hacks_List'] = $filename;
	
	return;
}

include($phpbb_root_path . 'extension.inc');
(file_exists('pagestart.' . $phpEx)) ? include('pagestart.' . $phpEx) : include('pagestart.inc');
[/code]

replache with

[code]
 if( !empty($setmodules) )
 {
   $filename = basename(__FILE__);
   $module['General']['Hacks_List'] = $filename;

   return;
 }

$phpbb_root_path = './../';
require($phpbb_root_path . 'extension.inc');
require('./pagestart.' . $phpEx);
[/code]


Also

http://www.phpbbplus.it/phpbbplus/plus-153-buf-fixes-da-applicare-vp15693.html#15693[/quote]

[b]PLEASE APPLY THIS PATCH![/b]