Discuss: MyBB 1.03 Released - Security Update

[Dennis Tsang]

Is your search working and are you using 1.03?

[Ryan Gordon]

Will78, look for $op = ""; instead.

[Will78]

Will78, look for $op = ""; instead.

sorry still is not finding it all i find is this

$op = "";
	if($mybb->input['keywords']) {
		$wheresql = "(1=0 ";
		if($mybb->input['srchtype'] != 2)
		{

on line 510-514

the other 1 nothing there and search on my site is not working for me

[zaher1988]

heloo there

$op = "";

should look as

$op = "";
	}

and u dont have to apply the fix

regards

[Will78]

I just noticed in bug archives Peter i think uploaedd the newest search.php

[Christian]

updated....thanks

[Ozidave]

well yeah these are his details
name: dedo
Email Address: [email protected]
IP Address: 88.152.35.15

regards

I tried to BAN this IP Address: 88.152.35.15 at the server, and it can't be resolved as a legitimate address. ??

[diablo_]

I don't have problems with search option in mybb 1.03 ?!?!

[WDZ]

I tried to BAN this IP Address: 88.152.35.15 at the server, and it can't be resolved as a legitimate address. ??

o_O

Well, it is a valid IP address, and it resolves to the hostname bzq-88-152-35-15.red.bezeqint.net.

IMO, banning that IP is pretty useless anyway. The hacker might have a dynamic IP, and if not, he can simply use a proxy.

I don't have problems with search option in mybb 1.03 ?!?!

Well, be happy then! You probably updated after the developers fixed the bug.

[.Lou]

Funny thing is, the guy that hacked many other forums in the past, never used a proxy. so the bannage worked imidiately