Re: MkPortal Urlobox Cross Site Request Forgery

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I was wrong about this issue in my previous post.

Unofficial Solution:

FIND in /mkportal/modules/urlobox/index.php:
			$message = preg_replace('/\[URL=(.+?)\](.+)\[\/URL\]/',$no_url,$message);
			$message = preg_replace('/\[IMG\](.+?)\[\/IMG\]/',$no_img,$message);


REPLACE WITH:
			$message = preg_replace('/\[URL=(.+?)\](.+)\[\/URL\]/i',$no_url,$message);
			$message = preg_replace('/\[IMG\](.+?)\[\/IMG\]/i',$no_img,$message);

-=DKC=-

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux