https://www.icyphoenix.com/viewtopic.php?f=35&t=847
-----------------------------------
Frost
Wed 10 Jan, 2007 15:44

includes/kb_****.php fix?
-----------------------------------
I looked but I couldn't tell wether or not this fix has been done in the beta.

I recently heard about the kb_constants.php exploit and the fix was supposed to be to add..
[code linenumbers=false]if ( !defined('IN_PHPBB') )
{
  die("Hacking attempt");
}
[/code]

to all the kb_****.php files under the comments but I looked in the files and I saw..

[code linenumbers=false]if ( !defined( 'IN_PORTAL' ) )

{

	die( "Hacking attempt" );

}
[/code]

Is this right or has it not been done yet?
I thought it might be safest to do...

[code linenumbers=false]
if( !defined('IN_PHPBB') )

{

    die('Hacking attempt');

    exit;

}

else

{

    if( !defined('IN_PORTAL') )

    {

        die('Hacking attempt');

        exit;

    }

}
[/code]

But then again I am a designer not a coder  :oops:

Oh yea, lol

In reference to..

http://www.securityfocus.com/bid/21577


-----------------------------------
Mighty Gorgon
Thu 11 Jan, 2007 02:10

Re: includes/kb_****.php fix?
-----------------------------------
KB in Icy Phoenix should be protected against this... :roll:


-----------------------------------
Frost
Thu 11 Jan, 2007 09:32

Re: includes/kb_****.php fix?
-----------------------------------
Ok, I was comparing two different phpbb's trying to figure out who already did the fix the right way

Looks like you win :lol_flag:


-----------------------------------
Mighty Gorgon
Fri 12 Jan, 2007 02:17

Re: includes/kb_****.php fix?
-----------------------------------
[quote user="Frost" post="7029"]Looks like you win :lol_flag:[/quote]
Thanks... where is the prize? :mri:


-----------------------------------
joni806
Fri 12 Jan, 2007 05:54

Re: Includes/kb_****.php Fix?
-----------------------------------
hello me you could put a file zip or to rar the same gives, I am bad in php and not like doing it


-----------------------------------
Frost
Fri 12 Jan, 2007 07:13

Re: includes/kb_****.php fix?
-----------------------------------
[quote user="joni806" post="7190"]hello me you could put a file zip or to rar the same gives, I am bad in php and not like doing it[/quote]

[b][color=red]DO NOT DO THE ABOVE EDITS[/color][/b]

I was just asking MG a question, he already had it done and your files are already correct. Sorry :icy_lol_flag:

[quote user="Mighty Gorgon" post="7168"][quote user="Frost" post="7029"]Looks like you win :lol_flag:[/quote]
Thanks... where is the prize? :mri:[/quote]

Um... :?  Here www.black-fusion.com/media/prize.html :icy_lol_flag:


-----------------------------------
TheSteffen
Fri 12 Jan, 2007 08:22

Re: includes/kb_****.php fix?
-----------------------------------
Great Frost  :mricy:


-----------------------------------
Frost
Fri 12 Jan, 2007 08:59

Re: includes/kb_****.php fix?
-----------------------------------
lol I googled italian prize, took the first prize i saw and made it text :icy_lol_flag:


-----------------------------------
Mighty Gorgon
Wed 31 Jan, 2007 02:02

Re: includes/kb_****.php fix?
-----------------------------------
Ha ha ha... thank you, it is really nice! :wink:


