A nonsense article
|
| Author | Content |
|---|---|
| Sander_Marechal Feb 04, 2007 3:48 AM EDT |
This article is a load on nonsense. The hacked boards pointed to are all really old versions. phpBB 2.0.8? The latest version is phpbb 2.0.22. The so call "root path" vulnerability is simply the age-old register_globals problem. Register_globals has been off in PHP since PHP 4.3. Besides that, it's really easy to work around. Sample code: if (ini_get('register_globals')) { for ($var in $_GLOBALS) unset $var } And such code has been part of phpBB since 2.0.11 IIRC. |
| swbrown Feb 04, 2007 7:38 AM EDT |
Heh, those derivatives are so old and dead that the advisories and their copies completely dominate the Google results. At least one of them appears to have last released an update in 2002. |
Posting in this forum is limited to members of the group: [ForumMods, SITEADMINS, MEMBERS.]
Becoming a member of LXer is easy and free. Join Us!