I recently heard about the kb_constants.php exploit and the fix was supposed to be to add..
to all the kb_****.php files under the comments but I looked in the files and I saw..
Is this right or has it not been done yet?
I thought it might be safest to do...
if( !defined('IN_PHPBB') )
{
die('Hacking attempt');
exit;
}
else
{
if( !defined('IN_PORTAL') )
{
die('Hacking attempt');
exit;
}
}
{
die('Hacking attempt');
exit;
}
else
{
if( !defined('IN_PORTAL') )
{
die('Hacking attempt');
exit;
}
}
But then again I am a designer not a coder :oops:
Oh yea, LOL
In reference to..
http://www.securityfocus.com/bid/21577