Sicherheits Bug bei Solved Mod

[Juergen]

Ich rate Dringend davon ab den Solved Mod zu Installieren. Dieser hebt das ausblenden der Administrator oder Moderator Rechte in den Nachrichten auf. Gäste können dort nachrichten Löschen!!
Original Code:

Code Select Expand

if (!$mstate)
{
      print "<font size=\"-1\">$menusep<a href=\"$cgi;action=post;threadid=$viewnum;quote=$mid;title=" . URLencode($txt[116]) . ";start=$start\">" . $img[replyquote] . '</a>';
      if(in_array($username,$moderators) || $settings[7] == 'Administrator' || $settings[7] == 'Global Moderator'|| ($ID_MEMBER==$muserID && $ID_MEMBER != -1))
                print "$menusep<a href=\"$cgi;action=modify;msg=$mid;threadid=$viewnum;start=$start\">$img[modify]</a>$menusep<a href=\"javascript:DoConfirm('$txt[154]?','$cgi;action=modify2;threadid=$viewnum;msg=$mid;d=1;start=$start');\">$img[delete]</a>";
      print "</font>";
}Fehler Code:

Code Select Expand

if (!$mstate)
{
      print "<font size=\"-1\">$menusep<a href=\"$cgi;action=post;threadid=$viewnum;quote=$mid;title=" . URLencode($txt[116]) . ";start=$start\">" . $img[replyquote] . '</a>';
      if(in_array($username,$moderators) || $settings[7] == 'Administrator' || $settings[7] == 'Global Moderator'|| ($ID_MEMBER==$muserID && $ID_MEMBER != -1))
          print "$solvedmsg";
          print "$menusep<a href=\"$cgi;action=modify;msg=$mid;threadid=$viewnum;start=$start\">$img[modify]</a>$menusep<a href=\"javascript:DoConfirm('$txt[154]?','$cgi;action=modify2;threadid=$viewnum;msg=$mid;d=1;start=$start');\">$img[delete]</a>";
        print "</font>";
}