| View previous topic :: View next topic |
| Author |
Message |
phpffl_jason
Joined: 29 Apr 2005
Posts: 1619
|
 Posted: Sat Sep 15, 2007 11:24 am Post subject: phpFFL 1.25 Released - URGENT (REQUIRED SECURITY UPGRADE) |
 |
|
phpFFL 1.25 Released
Download from https://sourceforge.net/projects/phpffl/
IMPORTANT - REQUIRED SECURITY UPGRADE
This upgrade contains security fixes that left unfixed leave phpffl and your server vulnerable. It is required that you upgrade to this version. The changes should be easy to merge with any mods you may have made. All changes relate to the include() and require() functions which generally appear at the top of the files. If you have any questions about merging these changes with your mods please most in the mods forum. [/b]
Changed Files:
admin.php
custom_pages.php
draft.php
faq.php
leagues.php
livedraft.php
login.php
my_team.php
profile.php
signup.php
statistics.php
transactions.php
language\english\admin.php
language\german\admin.php
program_files\admin\custom_pages.php
program_files\common.php
program_files\livedraft\admin.php
program_files\livedraft\livedraft.php
Run Update:
phpffl_updates\1.25\updates.php
All upgrades should run this upgrade script. Just upload it to the root of your
phpFFL installation and run it once through your browser.
NOTE: If you are upgrading from a version prior to 1.20 please see notes for 1.20 upgrade.
Fixes & Updates
- Fixed major security issue. You MUST upgrade the files changed in this version or the security of your install and you server will be at risk. If you have made any mods and aren't sure how to merge them with your changed files post in the mods forum at www.phpffl.com/forums/. The changes made to these files only involve the include() and require() which are generally at the top of the files, so they should be easy to merge.
jason
Last edited by phpffl_jason on Tue Oct 16, 2007 2:29 pm; edited 1 time in total |
|
| Back to top |
|
 |
phpffl_jason
Joined: 29 Apr 2005
Posts: 1619
|
| Posted: Sat Sep 15, 2007 12:13 pm Post subject: |
|
|
| Also...we'll probably be making more security updates this week as well so please check back next week for another important upgrade. |
|
| Back to top |
|
|
mjcocat
Joined: 15 Aug 2005
Posts: 775
|
| Posted: Sat Sep 15, 2007 2:30 pm Post subject: |
|
|
| Other than modified html, what are some signs of an exploited site? |
|
| Back to top |
|
|
phpffl_jason
Joined: 29 Apr 2005
Posts: 1619
|
| Posted: Sat Sep 15, 2007 3:05 pm Post subject: |
|
|
| mjcocat wrote: | | Other than modified html, what are some signs of an exploited site? |
I'd check files in your site root, program_files, and livedraft folders. ...sort by modified date and see if there is anything unusual from yesterday or today.
If register_globals was off you should be fine.
Myself and one other guy that PM'd me got hit. they put up new index files for both of us so when you visited your site you got the hacker page. |
|
| Back to top |
|
|
zencorners
Joined: 27 Jul 2006
Posts: 335
Location: Miami, FL
|
| Posted: Sat Sep 15, 2007 3:39 pm Post subject: |
|
|
Got hacked myself, besides the obvious html file, I had the three files posted in my phpFFL directory:
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
