This has to be fixed ASAP.  I have made a patch for P6 and those few that use P7.  P5 has also been fixed (download patch below, or redownload entire package from downloads page).  This is a major security bug and needs patching ASAP!  Thanks to Rocketdrive for finding, and PMing me of this error.


Download P6 Security Fix

Download P7 Security Fix

Download P5 Security Fix

If you do not patch this, your forum will be open to deleted accounts by ANYONE on the system.  I was notified of this bug this morning, and the pacth was availble within 20 minutes of it's finding.

Installing:

To install, simply replace the old MemberPanel.pl file in the /Blah/Code directory, with the new one.


- Justin


Note: THIS ONLY EFFECT PLATINUM SERIES

Also, this was a rush to get out, any grammer mistakes in this post should be overlooked.  

So do you just replace the existing one with this in /Blah/Code/ ?

Yep.  Make sure it's the same one for you version.  If you are using P7, make sure it's the last one I posted, not an OLD one.  

Justin,

Where do we find the newest P7?  I downloaded but have no idea if it is the latest.  If it is only located in one place then I assume I have the right one.

I downloaded from here:  http://www.eblah.com/cgi-bin/bb/Blah.pl?b=bugs,v=download,f=eblahp7.zip about 2 days ago.

20 mins to patch a major issue? Pretty impressive! And about 3 months quicker than most leading games software houses

Thanks

Excellent work and incredible speed!

You make Eblah the best!!

Thank you Justin!

Thanks for the fast fix!

Thanks for the fix Justin, nice work

Thank you

Thank you sir. Much appreciated.

Nice work. Glad I am on the mailing list for this. That was a big problem. Fast work man keep it up.


Problem with the fix

Here is what it says to my members.

There was a problem loading a part of the E-Blah software. The system administrator may be upgrading this forum. If you continue to receive this error after several minutes, please contact the system administrator. Further information relating to this incident is below (file information).

./MemberPanel.pl

syntax error at ./MemberPanel.pl line 1524, near "lo",""
Compilation failed in require at Blah.pl line 73.

You got the wrong version then.

Well when I check what version I have it says that it is p5 so I got p5 and it had that error. I will try p6 then.

Ok yah I p6 and it had the same problem. p7 is what worked, just odd that it tells me that we have p5. Thanks for the update.

Hrmmm ..... if you use P7, and you have P6, it WILL NOT work.  You WILL NOT be able to edit your profile.