PHP Update

Dekafox

Fabulously Foxy Dragon
Citizen
Not sure exactly which version of PHP Allspark uses(a plus I suppose that the version isn't publicly embedded in the headers) but there's a major unauth RCE that just got patched for all versions.


You all may already be aware, just passing it on just in case.
 

Pocket

jumbled pile of person
Citizen
The forum engine also hasn't been updated in five years; that seems like an issue. I know XenForo charges for upgrades, but it might be worth it after this much time, especially since we managed to get hacked twice in a row before and it turned out the host wasn't providing the backups it claimed it was.
 

Kalidor

Supreme System Overlord
Staff member
Council of Elders
Citizen
Haha oops. Was logged in my alt account!

Actually you don't know what's been updated or not on the backend, so not so fast.

I'm aware of the exploit and have made the appropriate fixes.
 
Top Bottom