friendly warning about phpbb

Guest

the dumbrella forums just got hacked and tons and tons of great stuff was destroyed in one fell swoop.

this is apparently because the admin missed one small patch. even though he installed the subsequent ones, that one patch was critical to blocking this exploit.

a little more info is here: phpbb exploit

and more/better info can be found just by googling around.

huge fan of qwantz, would hate to see this happen again. make sure you've got all your phpbb patches.

Posted: Tue Mar 08, 2005 2:59 am

I love having subforums. Smile

HEY! LOOK! THERE ARE QUOTES AT THE BOTTOM OF THE PAGE! *searches for "New Topic" button*

Posted: Tue Mar 08, 2005 3:33 am

Yes, there is already a thread about this in the appropriate forum.

But thanks for the warning.

Posted: Tue Mar 08, 2005 8:01 am

Thanks for the warning! I was lucky enough to upgrade 2 days ago, before dumbrella got hit.

Posted: Tue Mar 08, 2005 9:07 am

Also these complaints about it being in the wrong forum sure look silly NOW!

Posted: Tue Mar 08, 2005 9:10 am

ALSO: the patch fixes things by changing a comparison using "==" to a comparison using "===". I don't know much about PHP: what does the triple equals operator do that the double equals operator doesn't?

Posted: Tue Mar 08, 2005 9:25 am

It's three times as sexy as "=", that's what!

Posted: Tue Mar 08, 2005 10:42 am

Ryan wrote:

ALSO: the patch fixes things by changing a comparison using "==" to a comparison using "===". I don't know much about PHP: what does the triple equals operator do that the double equals operator doesn't?

PHP has loose typing. So, normally, if you use ==, "1" == 1 would return true. However, === checks both the value and the type. So, 1 === 1 would be true, and "1" === "1" would be true, but "1" === 1 would be false.

Posted: Tue Mar 08, 2005 10:45 am

Aha! Thanks Ben!

Posted: Tue Mar 08, 2005 10:54 am

what do you supposed ==== does, then? I bet it's AMAZING.

Posted: Tue Mar 08, 2005 10:55 am

Guest

kundor wrote:

Yes, there is already a thread about this in the appropriate forum.

But thanks for the warning.

you're welcome. as you can see by looking at the dates, mine was posted the day before the one you're talking about. albeit in the wrong forum, sorry. i wasn't double-posting though.
this was my first time on these forums. i miscategorized the first forum as a "general" forum so i posted there, hoping that would be where a moderator would see it first. sorry about the mix-up and glad to hear you're up to date and covered. interesting tidbit on the "===" also; thanks guys.

Posted: Thu Mar 10, 2005 12:24 am

Stay a while, friend! We are pretty nice around here. And you, as well, seem like a nice fellow!