Ankündigung auf phpbb2.de
Unter anderem wird in der Version eine kritische Sicherheitlücke, bezüglich des highlighting, behoben:
- Code: Alles auswählen
#
#----------[ OPEN ]-------------------------------------
#
viewtopic.php
#
#----------[ FIND ]-------------------------------------
#
$message = str_replace('\"', '"', substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "@preg_replace('#\b(" . str_replace('\\', '\\\\', $highlight_match) . ")\b#i', '<span style=\"color:#" . $theme['fontcolor3'] . "\"><b>\\\\1</b></span>', '\\0')", '>' . $message . '<'), 1, -1));
#
#----------[ REPLACE WITH ]-----------------------------
#
$message = str_replace('\"', '"', substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "@preg_replace('#\b(" . str_replace('\\', '\\\\', addslashes($highlight_match)) . ")\b#i', '<span style=\"color:#" . $theme['fontcolor3'] . "\"><b>\\\\1</b></span>', '\\0')", '>' . $message . '<'), 1, -1));
#
#----------[ SAVE AND CLOSE ALL FILES ]-----------------
#
# EoM
