IPBSupport News

Antwort

Manual Update Instructions
Edit the file 'sources/action_admin/member.php'. Line 3456

$joined = $this->ipsclass->get_date( $r['joined'], 'JOINED' );
			
			$people .= <<<EOF
						<td width='{$td_width}%' align='left' class='$class'>

Add above it:

$avatar = "<img src='{$this->ipsclass->skin_url}/images/memsearch_head.gif' border='0' />";
			
			$joined = $this->ipsclass->get_date( $r['joined'], 'JOINED' );
			
			$people .= <<<EOF
						<td width='{$td_width}%' align='left' class='$class'>

IPB 2.1.7 Security Update - Medium Priority

It has come to our attention that due to the way some browsers interpret image tags a vulnerability exists which allows a malicious user to perform an XSS attack by forcing an "onerror" event in the snapback tag.

To update your board, simply download the attached ZIP file, unarchive it and upload 'sources/classes/bbcode/class_bbcode_core.php' over the one on your server. If you wish to patch your board manually, please read the second post in this announcement.

The main download has been updated as of the time of this announcement.

Note: IPB 2.2.0 (all versions) are NOT affected by this vulnerability.

Manual Patch Instructions for "sources/classes/bbcode/class_bbcode_core.php"

Function "regex_check_image", line 924:

Change:

$default = "[img]".$url."[/img]";

To:

$default = "[img]".str_replace( '[', '&# 091;', $url )."[/img]";

Change:

if ( preg_match( "/[?&;]/", $url) )

To:

if ( preg_match( "/[?&;\<\[]/", $url) )

Function "post_db_parse_bbcode", Line 486

Change:

preg_match_all( "#(\[$preg_tag\])((?!\[/$preg_tag\]).+?)?(\[/$preg_tag\])#si", $t, $match );

To:

preg_match_all( "#(\[$preg_tag\])((?!\[/$preg_tag\]).+?)?(\[/$preg_tag\])#si", $t, $match );

if ( $row['bbcode_tag'] == 'snapback' )
{
	$match[2][$i] = intval( $match[2][$i] );
}

Hallo Zusammen,

das Forum läuft nun wieder, keine Daten sind verloren - alles ist beim alten.

Ich möchte mich nochmal für den ca. zwei tägigen Ausfall entschuldigen.


Gute Grüße,
Helge

Hallo, hier einmal ein Update


...also, der Domainumzug ist nun schon vollbracht, und ich denke das soweit alles Problemlos über die Bühne lief.

Wir wünschen weiterhin viel Spaß hier im Forum.

Gut aufgepaßt, Christian.  

Ich würde es auch befürworten, unterhalb von

  if ( preg_match( "/^http:\/\/$/i", $ibforums->input['url_photo'] ) )
 {
  $ibforums->input['url_photo'] = "";
 }

noch

if ( preg_match( "#javascript:#is", $ibforums->input['url_photo'] ) )
{
$ibforums->input['url_photo'] = "";
}

einzusetzen.