phpBBHacks.com - phpBB 3.0.7-PL1 Released
Talk martial arts at KarateForums.com
StatsForums Home   RegisterRegister   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in
FAQFAQ   SearchSearch   MemberlistMemberlist   TutorialsTutorials   ContactContact Us
Username:    Password:
Remember Me?        I Lost My Password!
Bookmark and Share
Post new topic   Reply to topic    phpBBHacks.com Support Forums Forum Index -> Announcements
 See a User Guidelines violation? Please contact us.
Author Message

Patrick
Admin/Webmaster

Joined: 11 May 2001
Posts: 17279
Location: Harbinger, NC, U.S.A.
PostPosted: March 5th 2010, 6:29 pm    Post subject: phpBB 3.0.7-PL1 Released Reply with quote
Hello,

phpBB 3.0.7-PL1 has been released in order to address a security issue that was introduced in phpBB 3.0.7, according to an announcement from Nils. As such, you are urged to upgrade as soon as possible.

Update: The wording I had here, explaining the issue when this post was first made, was not accurate. In lieu of explaining it in a more detailed manner, the issue is that, under certain circumstances, a member or guest may be able to view the contents of a private forum, even if you have not specifically granted them access to it.

The fix is a single code change, which you can make to feed.php on line 525:

Find:

Code:
$forum_ids = array_keys($auth->acl_getf('f_read'));

Replace with:

Code:
$forum_ids = array_keys($auth->acl_getf('f_read', true));

There are no other code changes in phpBB 3.0.7-PL1. Nonetheless, we also have the full package available for download: http://www.phpbbhacks.com/download/9131

Thank you for reading and visiting phpBBHacks.com.

Sincerely,

Patrick
_________________
Patrick O'Keefe - phpBBHacks.com Administrator - Feedback? Questions? Please Contact Me!
User Guidelines - Featured phpBB - Featured Author - phpBBHacks.com Awards - Supported Sites - About Us
Author, Managing Online Forums - A Practical Guide to Community Management
phpBB 3 Tutorials: Add Hacks | Clear Your Cache | Fix Missing Images | phpBB 3 Permissions Guide
Back to top
View user's profile Send private message Send e-mail Visit poster's website AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    phpBBHacks.com Support Forums Forum Index -> Announcements All times are GMT - 6 Hours
Page 1 of 1
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Links: Big Message Boards - Free JavaScript - phpBB2 - phpbb styles - Suporte phpBB - phpBB Česky - phpBB Turkiye - phpBBArabia.com - phpBB-fr.com - Romanian phpBB online community - phpBB-TW.net - phpBBservice.nl - phpBB Brasil - phpBB Portugal - phpBBpersian.com

Network: iFroggy Hosting - PhotoshopForums.com - Managing Online Forums - ManagingCommunities.com - CommunityAdmins.com - KarateForums.com - Bad Boy Blog - SodaRatings.com - Patrick O'Keefe

< Advertising - Contact Us - Disclosure Policy - Staff - User Guidelines >

Copyright © 2001-2012. iFroggy Network, phpBBHacks.com. All Rights Reserved. Privacy Policy. We Support phpBBHacks.com (of course!).
Powered by phpBB © phpBB Group. phpBB SEO. We are in no way affiliated with the phpBB Group. phpBB is copyright to the phpBB Group.