Welcome, Guest. Please Login or Register.
November 23, 2024, 11:58:44 AM
Home Help Search Log in Register
News: SMF is the next generation in forum software, almost completely re-written from the ground up, make sure you don't fall for cheap imitations that suffer from feature bloat!

YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  SECURITY FIX! MAKE THIS CHANGE! « previous next »
Pages: [1] 2 Reply Ignore Print
Author Topic: SECURITY FIX! MAKE THIS CHANGE!  (Read 16485 times)
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!

WWW
SECURITY FIX! MAKE THIS CHANGE!
« on: February 02, 2003, 05:00:18 PM »		 Reply with quote
We sent out one email already and apparently some people are opting NOT to make this change and are now getting exploited...MAKE THIS FIX!

http://www.yabbse.org/community/index.php?board=9;action=display;threadid=17919
Logged

My Amazon Wishlist
My Blog
7summits
Noobie
*
Posts: 47


Made it ma! On top of the world!

WWW
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #1 on: February 02, 2003, 05:06:48 PM »		 Reply with quote
errr, that's email and anouncement # 3 within an hour..
Someone exploiting Yabbse.org?
« Last Edit: February 02, 2003, 05:08:35 PM by 7summits » Logged
http://7summits.com will take you to the highest points on the continents! Climb Kilimanjaro, Aconcagua and more...
New YabbSe soon!
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #2 on: February 02, 2003, 05:07:20 PM »		 Reply with quote
Definitely make this change. It is very easy, the lines are near the top of the file, you won't even have to scroll down to see it most likely. This is a very important fix.

And to Jeff, I just got my 3rd email notifying me of this post... not sure if this was intentional or not, but just fyi...
Logged
http://www.umich.edu/~ifette/mysig.swf
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #3 on: February 02, 2003, 05:08:04 PM »		 Reply with quote
OK, I take it it I got 3 announcements in an hour for a reason. Hopefully nothing's being exploited and Jeff just wants to make sure people get the message...
Logged
http://www.umich.edu/~ifette/mysig.swf
andrea
Global Moderator
YaBB God
*****
Posts: 4400


Peace on Earth

WWW
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #4 on: February 02, 2003, 05:17:08 PM »		 Reply with quote
Wow, currently online: 279 Guests, 108 Users

Hopefully everybody got the message now.  :)

Jeff, you should maybe lock these new 3 threads such that the discussion is focussed in the original thread.
Logged
Andrea Hubacher

Download smileys here - please follow the TOS - bitte Nutzungsbedingungen beachten
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #5 on: February 02, 2003, 05:24:31 PM »		 Reply with quote
mmmm... you mean these 4 new threads?

Is this really Jeff doing this, or is someone having a bit of fun? I have to admit, the emails are starting to get a bit excessive...
Logged
http://www.umich.edu/~ifette/mysig.swf
andrea
Global Moderator
YaBB God
*****
Posts: 4400


Peace on Earth

WWW
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #6 on: February 02, 2003, 05:45:45 PM »		 Reply with quote
Yeah in the meanwhile its already 4. Maybe not all were sent by Jeff...
Logged
Andrea Hubacher

Download smileys here - please follow the TOS - bitte Nutzungsbedingungen beachten
Robbie
Noobie
*
Posts: 48


Trendhost.net

ICQ - 54598099deloodgieter@wanadoo.nl WWW
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #7 on: February 02, 2003, 05:48:08 PM »		 Reply with quote
and 5 it is!! :o
Logged
www.trendhost.net ___ www.mtrend.net
Vagcmyevad
Noobie
*
Posts: 16
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #8 on: February 02, 2003, 06:00:45 PM »		 Reply with quote
We get the message Jeff, 6's enough...
Logged
Robbie
Noobie
*
Posts: 48


Trendhost.net

ICQ - 54598099deloodgieter@wanadoo.nl WWW
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #9 on: February 02, 2003, 06:09:18 PM »		 Reply with quote
it's 7 by now!!
Logged
www.trendhost.net ___ www.mtrend.net
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #10 on: February 02, 2003, 06:11:00 PM »		 Reply with quote
Yes, 7 emails is waaaay too much. As I said, I'm all for security, but I am also for a nice and tidy inbox..
Logged
http://www.umich.edu/~ifette/mysig.swf
Vagcmyevad
Noobie
*
Posts: 16
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #11 on: February 02, 2003, 06:18:46 PM »		 Reply with quote
8. >:(
Logged
Agelmar
YaBB God
*****
Posts: 931


Takako Matsu = Goddess
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #12 on: February 02, 2003, 06:43:45 PM »		 Reply with quote
Please Jeff, make it stop... is your NotifyUsersNewAnnouncement() looping infinitely or what?
Logged
http://www.umich.edu/~ifette/mysig.swf
orange
Noobie
*
Posts: 18


I'm a llama!
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #13 on: February 02, 2003, 06:44:22 PM »		 Reply with quote
Well, this will achieve two things anyway:

(1) everyone will apply the security fix now
(2) everyone will disable e-mail announcements having recieved the 9 e-mails so far, so if there is something important in future no-one will know about it.

Ah well.
Logged
Jeff Lewis
Global Moderator
YaBB God
*****
Posts: 10149


I'm a llama!

WWW
Re:SECURITY FIX! MAKE THIS CHANGE!
« Reply #14 on: February 02, 2003, 08:39:19 PM »		 Reply with quote
Oops sorry. I went out and I guess it looped or something...will have to see if soeone was messing with the code here for the mass mailings.

Maybe now at least people will apply this fix? It's very important and some people have choosen to ignore it and have been hit...
Logged

My Amazon Wishlist
My Blog
Pages: [1] 2 Reply Ignore Print 
YaBB SE Community  |  YaBB SE Info  |  News From the YaBB SE Team  |  SECURITY FIX! MAKE THIS CHANGE! « previous - next »
 


Powered by MySQL Powered by PHP YaBB SE Community | Powered by YaBB SE
© 2001-2003, YaBB SE Dev Team. All Rights Reserved.
SMF 2.1.4 © 2023, Simple Machines
 Valid XHTML 1.0! Valid CSS

Page created in 0.043 seconds with 20 queries.