vBa CMPS Security Flaw Discovered

[Samir]

Is there any way to just modify some files to make the fix? I've got a lot of my vba files customized. Running 3.2.2.

And thank you for the terrific support. Even vbulletin doesn't seem to support their v3 product as strongly as vbadvanced.

[A.Chakery]

As Brian Mentioned here I think there is no need. but Personally I performed the upgrade process without any issues...

before doing any changes please don forget to take backups...

[Brian]

Originally Posted by A.Chakery

Brian is it ok to use the old news.php ? cause I did so much customizations to it and at the moment I have not enough time to do the custom codding again.

thanks

There were no changes to the news.php module, so it should be fine to use your old file.

Originally Posted by Artes_Marciales

OK, thanks.
I understand that it is not necessary to run the installer right?

Personally I still would run the upgrade option just to make sure that you're phrases, templates, and etc are up to date, plus that will update your version number so there's no confusion about what version you may be running in the future.

Originally Posted by Samir

Is there any way to just modify some files to make the fix? I've got a lot of my vba files customized. Running 3.2.2.

You can open the includes/vba_cmps_include_top.php and includes/vba_cmps_bottom.php files and add this code just below the opening <?php tag to patch things.

PHP Code:

if (!defined('THIS_SCRIPT'))
{
exit;
} 


[Samir]

Originally Posted by Brian

You can open the includes/vba_cmps_include_top.php and includes/vba_cmps_bottom.php files and add this code just below the opening <?php tag to patch things.

PHP Code:

if (!defined('THIS_SCRIPT'))
{
exit;
} 


Thank you so much Brian! I've been a loyal fan of vba for many years, and this type of extremely rare support is exactly why.

[aldahr]

Originally Posted by Brian

You can open the includes/vba_cmps_include_top.php and includes/vba_cmps_bottom.php files and add this code just below the opening <?php tag to patch things.

PHP Code:
if (!defined('THIS_SCRIPT'))
{
exit;
}

Thanks so much Brian

[diablo-sat]

can someone please correct me if im wrong but all i do is download the new files and over right them? no need to install again or do you have to do that. and when i update will i lose every thing on the portal

[NJStangers]

so all I really have to update is that code snippet by adding it?

[Samir]

Originally Posted by NJStangers

so all I really have to update is that code snippet by adding it?

Per Brian's post:

Originally Posted by Brian

You can open the includes/vba_cmps_include_top.php and includes/vba_cmps_bottom.php files and add this code just below the opening <?php tag to patch things.

PHP Code:

if (!defined('THIS_SCRIPT'))
{
exit;
} 


[diablo-sat]

i just updated the 2 files with the code

thx

[MikeF]

Hi, Brian

For the init_startup plugins, you forgot to add:

if (!VB_API) { }

* Compatibility for mobile app. FYI. Thank you for continuing to support this great product

[Samir]

Originally Posted by diablo-sat

i just updated the 2 files with the code

thx

I found differences when file comparing 3.2.2 and 3.2.3 versions of the files, so I wouldn't recommend that without a full upgrade.