https://www.icyphoenix.com/viewtopic.php?f=35&t=7665&p=51759#p51759
-----------------------------------
mort
Wed 23 Feb, 2011 10:55

Re: Security Alert – CBack CrackerTracker.
-----------------------------------
No offence - My post was designed to point you in the right direction. ;)

I was being subtle, because I didn't want to disappoint spydie that it the thread by the "Inactive User" MG states that the problem with check-boxes has been fixed.

If it hasn't and you say you didn't add check-boxes anyway, then the problem is something else. Other than that - Killing a whole file for the sake of avoiding a security problem is only going to maybe leave the file open to possible attacks.

It would be better if MG knows what Cracker Tracker is blocking - Then he could make allowances for it in CT, just like he did with adding check-boxes.

One day you may get hacked, and it doesn't help if you open up files by removing what MG is trying to protect.

On the other hand -  PHP v5* is much more secure than the previous versions in that things are done very differently. - Maybe MG needs to re-evaluate if cTracker has a useful purpose any more.  :?:


