Am inteles prefect ce ai vrut sa spui .
Deasemenea , am gasit
acest topic , si este exact ce imi trebuia . Am facut ce spunea acolo , si tot degeaba .
In debug apare :
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /forum/admin/admin_easymod.php
----------------
Attack-Time: 23.07.2008 12:43 pm
------------
Request-Method: POST
Matching rule: '
In variable: SQL0
Possible solution:
------------------
#
#-----[ OPEN ]------------------------------------------
#
/forum/admin/admin_easymod.php
#
#-----[ FIND ]------------------------------------------
#
include($phpbb_root_path . 'common.'.$phpEx);
#
#-----[ BEFORE, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('SQL0');
#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM
Deci am modificat in ct_security.php :
// Some fields in $HTTP_POST_VARS don't get checked to prevent wrong detection
$unchecked_post_fields = array('username', 'password', 'subject', 'message',
'poll_title', 'poll_option', 'poll_delete',
'email', 'confirm_code', 'aim', 'msn', 'yim',
'interests', 'occupation', 'signature', 'website',
'location', 'search', 'sitename', 'word',
'replacement', 'help', 'last_msg', 'quote', 'dl',
'preview', 'post', 'mode', 'content', 'server_name',
'script_path', 'sitename', 'site_desc', 'SQL0', 'disable_reg_msg',
'disable_msg', 'cookie', 'avatar', 'file', 'picture',
'filter', 'xs', 'edit', 'content', 'fileupload', 'filecomment',
'comment', 'rate', 'pic', 'search_author', 'add_poll_option_text');
Si tot nu merge .