global $nukeuser, $db, $prefix;
$nukeuser = base64_decode($user);
Change to:
Code:
if (stristr($_SERVER["QUERY_STRING"],'&user= ') AND $name==Private_Messages) header("Location: index.php");
global $nukeuser, $db, $prefix;
$user = addslashes($user);
$nukeuser = base64_decode($user);
Have you update the PHP Nuke Patched 2.3c files?? I have download it and the code is:
Code:
if (stristr($_SERVER["QUERY_STRING"],'&user=') AND $name==Private_Messages) header("Location: hackattempt.php");
global $nukeuser, $db, $prefix;
$nukeuser = base64_decode($user);
$result = $db->sql_query("SELECT active, view FROM ".$prefix."_modules WHERE title='$name'");
hackattempt.php??? the security addon hackattempt.php isn't include in php nuke patched
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum