[Sicherheitsfix] Admin Topic Action Logging 0.94 beta

[AmigaLink]

Über die ACP-Datei des "Admin Topic Action Logging 0.94 beta" MOD von Nivisec, lassen sich Exploit Dateien ausführen.
Fieser kleine Fix schließt die Lücke:

Code: Alles auswählen

#
#-----[ OPEN ]-----
#

admin/admin_topic_action_logging.php

#
#-----[ FIND ]-----
#

if( !empty($setmodules) ){
   include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_admin_topic_action_logging.' . $phpEx);
   $module['Forums']['Action_Logging'] = basename(__FILE__);
   
   return;
}

#
#-----[ REPLACE WITH ]-----
#

if( !empty($setmodules) ){
   $module['Forums']['Action_Logging'] = basename(__FILE__);
   
   return;
}

#
#-----[ OPEN ]-----
#

includes/functions.php

#
#----------[ FIND ]-------------------------------------
#

      include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_admin.' . $phpEx);

#
#----------[ AFTER, ADD ]-------------------------------
#

      include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_admin_topic_action_logging.' . $phpEx);

#
#-----[ SAVE/CLOSE ALL FILES ]-----
#
# EoM