Search:

Type: Posts; User: DrByte

Search: Search took 0.07 seconds.

  1. Replies
    7
    Views
    2,986

    Re: format string attack.

    Threat-wise it's insignificant. There are no plans to backport it at present. Best to plan an upgrade to benefit from all the other important security benefits in 1.3.9 though.
  2. Replies
    7
    Views
    2,986

    Re: format string attack.

    At its basic level, v1.3.9 already protects against that problem, since it automatically re-sets the cookie value once it discovers the invalid value.
    It can be reported as a false-positive...
Results 1 to 2 of 2
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR