MyBB Community Forums

Not to sound like a dummy, but where can I get it. I can't seem to find any download links on the downloads page or the main page.

Also, another question. Is the Dev team aware of current vulnerabilities in the software, and are they fixing them? I only ask because I recently integrated 1.2x into some company stuff and it took a co worker less than 10 minutes to grab exploit code for mybb. I happened to catch him in the act and after looking over what he had, it was for mybb 1.4. It looked like it was a guide to how to exploit it involving some SQL injection... I didn't go through the whole thing so I don't have any details. Just a question, thanks

1) http://community.mybboard.net/thread-32966.html

2) Report security issues at http://www.mybboard.net/contact

bloodsin, please do not spread FUD (Fear, Uncertainty, and Doubt). There are currently no reported vulnerabilities in MyBB 1.4. If you know of vulnerabilities in MyBB then PM a staff member or use the contact form at http://www.mybboard.net/contact

(2008-07-18, 03:48 PM)bloodsin Wrote: [ -> ]

(2008-07-18, 02:10 PM)shadow82x Wrote: [ -> ]1) http://community.mybboard.net/thread-32966.html

2) Report security issues at http://www.mybboard.net/contact

Thank you!

---

Yeah, looking for a mod was the first thing I did, but there doesn't seem to be one.

I'm looking through my_mail, honestly I don't have much idead what I might be looking for, would the option be somewhere in this area:

if($_SERVER['SERVER_NAME'])
	{
		$http_host = $_SERVER['SERVER_NAME'];
	}
	else if($_SERVER['HTTP_HOST'])
	{
		$http_host = $_SERVER['HTTP_HOST'];
	}
	else
	{
		$http_host = "unknown.local";
	}

That's my best guess, would changing "unknown.local" to the server i'd like to use work?

What are you trying to modify?

Gyah, sorry for the double post. This reply wasn't even meant for this thread.

---

But Tiki, even know that was an accidental posting, I can assure you that I was not spreading FUD. I will try to get ahold of the code I mentioned and get it to you.

I may not be a web developer, but I am a security professional, as was they guy that got ahold of the code. This is kindof what we do, but as I said, I will see if i can get it from him and give it to you.

Sorry for the inconvenience.