Results 1 to 10 of 18

Thread: Flynax v4.0.1, security patch #1 (8 Jun, 2012)

Threaded View

  1. #12
    a problem with step 3:

    my original file has

    /* deny files extension regular expresion */
    $l_deny_files_regexp = "/\.(php|php3|php4|php5|phtml|pl|py|psp|js|jsp|cgi|u til|inc)$/";

    /* conditions list */
    $l_cond = array(
    'isEmail' => $GLOBALS['lang']['mail'],
    'isUrl' => $GLOBALS['lang']['url']
    );


    that will mean according to your instructions that i will have 2 of this?
    /* deny files extension regular expresion */
    $l_deny_files_regexp = "/\.(php|php3|php4|php5|phtml|pl|py|psp|js|jsp|cgi|u til|inc)$/";

    or i should have just 1?

    another problem. step 4

    i have already in file

    if ( $back_errors = $rlCommon -> checkDynamicForm( $account_data, $fields, 'f', true ) )
    {
    foreach ( $back_errors as $error )
    {
    $errors[] = $error;
    }

    if ( $rlCommon -> error_fields )
    {
    $error_fields = $rlCommon -> error_fields;
    $rlCommon -> error_fields = false;
    }
    }

    $rlHook -> load('apPhpAccountsValidate');

    who made the modification into my site shoulded delete $rlHook -> load('apPhpAccountsValidate'); but didn't? i have that and olso the new code wich should replace it

    should i submit a ticket to have my files checked?
    Last edited by Petrache Nicolae; June 9, 2012 at 12:09 PM.