https://www.icyphoenix.com/viewtopic.php?f=35&t=847&p=6885#p6885
-----------------------------------
Frost
Wed 10 Jan, 2007 15:44

includes/kb_****.php fix?
-----------------------------------
I looked but I couldn't tell wether or not this fix has been done in the beta.

I recently heard about the kb_constants.php exploit and the fix was supposed to be to add..
[code linenumbers=false]if ( !defined('IN_PHPBB') )
{
  die("Hacking attempt");
}
[/code]

to all the kb_****.php files under the comments but I looked in the files and I saw..

[code linenumbers=false]if ( !defined( 'IN_PORTAL' ) )

{

	die( "Hacking attempt" );

}
[/code]

Is this right or has it not been done yet?
I thought it might be safest to do...

[code linenumbers=false]
if( !defined('IN_PHPBB') )

{

    die('Hacking attempt');

    exit;

}

else

{

    if( !defined('IN_PORTAL') )

    {

        die('Hacking attempt');

        exit;

    }

}
[/code]

But then again I am a designer not a coder  :oops:

Oh yea, lol

In reference to..

http://www.securityfocus.com/bid/21577


