Security Bulletin - vBSEO 3.6.0 PL2 Released

is there any way to check that is patch applied or not

After patched with PL2, there are still problems as link. However, this link works fine for my site.

Originally Posted by hhumas

is there any way to check that is patch applied or not

Hello,

If you've applied the code edit in the first post of the thread, or have simply uploaded an updated package,then you are good to go

Originally Posted by Baanfarsang

After patched with PL2, there are still problems as link. However, this link works fine for my site.

Hello,

This is not a maintenance release, but rather a security bulletin. Just a few minor bugs were corrected while a full maintenance release with a complete list of the bug fixes is being prepared.

Originally Posted by Andrés Durán Hewitt

Hello,

This is not a maintenance release, but rather a security bulletin. Just a few minor bugs were corrected while a full maintenance release with a complete list of the bug fixes is being prepared.

Can we conjuncted this link with PL2 or not?

So do we do the edit change for both, as the code is twice?
I have read the Thread but no one answered that question

I have vbseo 3.6.0 with the fix for the "promote the article" issue.

now i'm seeing PL2...

Did I miss the PL1 ??

By the way I suggest to remove all the posts and make clear on the first one the issue and the fix, otherways... we all get lost.

I'm using vbseo v3.3.0. I don't find this string: vbseo_int_var($ids);
Am I missing something?

In vBSEO v3.3.x the modification is different.
You should find:

PHP Code:

$rid = $db->vbseodb_query($q = "
SELECT
forumid,announcementid,title 


and add above:

PHP Code:

$aids=intval($aids); 


Aha. Thats why I couldn't find it.

You might want to update the opening post with this information, so that people running the latest version can make the edit.

Originally Posted by Andrés Durán Hewitt

Originally Posted by Siva GaneshThere are three files updated in PL2

functions_vbseo_pre.php
functions_vbseo_vb.php
functions_vbseo.php


Can I replace all the 3 ??

Hi Siva,

Other files were updated for bug fixes.

I updated all the 3 files, is it fine ? or should I update another few set of files ??

Are you able to give more details on the exploit and what an attacker may be able to achieve?

Originally Posted by Mert Gökçeimam

A PL tag has been added to all of the vBSEO packages available on our downloads area.

What do you mean by the above?

Originally Posted by Garfieldus

What do you mean by the above?

http://cl.ly/0G0L1r0n2A3u1H2L1u1z

Originally Posted by Mert Gökçeimam

http://cl.ly/0G0L1r0n2A3u1H2L1u1z

Ok, thanks. I thought you meant the downloaded files had the tag added into their filenames and didn't notice it on the file I downloaded.