12 Oct 2006, 12:28 PM
Totally Zenned
- Join Date:
- Jan 2006
- Location:
- NM
- Posts:
- 740
- Plugin Contributions:
- 0
Zero-Day XSS Security Fix
fix instructions for 1.3.0.2...I've kept up with the security releases but the changed files for this recent xxs fix don't match my files. Is leaving the changed files alone and simply adding the change as instructed manually ok?
I implimented the code addition to init_general_funcs.php adding at the bottom:
//-----------------
if (isset($_GET) & sizeof($_GET) > 0 ) {
foreach ($_GET as $key=>$value) {
$_GET[$key] = strip_tags($value);
}
}
//-----------------
Good enough?
