WARNING

[Mitchâ„¢]

Well I think there should be some sort of patch that should be installed. I know people who dont know alot of coding will just turn a blind eye on the subject.

[Crip]

Ok I provided a quick fix here.

It was not a problem on their site.  My site was hacked too.

So Jay,
we should really edit all the file in TPortal in your quick fix..is this something that Needs to be done without Bloc's own approval??

[JayBachatero]

If you look at the changes it's small changes.  I'll PM you with more details.

[elpvn]

Ok here is a quick fix.  This add slashes to apostrophes and removes any html tags from $_POST var.

In TPmodules.php

Code (find) Select Expand


$shout=strip_tags(substr($_POST['tp-shout'],0,300),'<b><u><i>');


Code (replace) Select Expand


$_POST = addslashes__recursive($_POST);
$shout = substr($_POST['tp-shout'],0,300);
$shout = strip_tags($shout);
$_POST['tp-shout-name'] = strip_tags($_POST['tp-shout-name']);


In TPortal.php

Code (find) Select Expand


  $shouts='Last '.$limit.' shouts:<hr />';

  while($row = mysql_fetch_assoc($request)){


Code (replace) Select Expand


  $shouts='Last '.$limit.' shouts:<hr />';

  while($row = mysql_fetch_assoc($request)){
$row = stripslashes__recursive($row);


In TPortalAdmin.php

Code (find) Select Expand


               if(mysql_num_rows($request)>0){
                  while ($row = mysql_fetch_assoc($request))
                  {


Code (replace) Select Expand


               if(mysql_num_rows($request)>0){
                  while ($row = mysql_fetch_assoc($request))
                  {
$row = stripslashes__recursive($row);


Thanks, I tried 

[JayBachatero]

That is for the shoutbox only.  It might be good to check any other place too just to be on the safe side.

[bloc]

I will send out notice of an update to 0.86 asap.

In the meantime, just try out Jay's code. I need to check it out and setup a update package.

[elpvn]

Jay, the link: http://www.kevmundial.com/board/index.php?action=googlemap can't operationÃ, 

[JayBachatero]

Bloc I'll post a packaged version of this fix in a few mins.  elpvn are you using IE or FF?

[elpvn]

Bloc I'll post a packaged version of this fix in a few mins.Ã,  elpvn are you using IE or FF?

Thank for up to update the fixed.
I using IE6 browserÃ, 

[JayBachatero]

@elpvn - Umm I still haven't applied the fix for the Google Map to work on IE6.  TLM provided a fix but forgot all about it .

Here is a packaged fix.  I tried it on my site and it worked.  If anything just let me know.