+--------------------------------------------------------------------------------+ | MyBB 1.2.3 to 1.2.4 Patch File | | (c) 2007 MyBB Group. | | | | This patch file fixes a security vulnerability issue in MyBB 1.2.3 | | | | Please follow the instructions documented to manually patch your board | | to MyBB 1.2.4 | +--------------------------------------------------------------------------------+ ===================== 1. inc/class_core.php (Version number change) ===================== Find: -- /** * The friendly version number of MyBB we're running. * * @var string */ var $version = "1.2.3"; /** * The version code of MyBB we're running. * * @var integer */ var $version_code = 123; -- REPLACE it with: -- /** * The friendly version number of MyBB we're running. * * @var string */ var $version = "1.2.4"; /** * The version code of MyBB we're running. * * @var integer */ var $version_code = 124; -- ===================== 2. inc/functions.php ===================== Find: -- return $ip; } -- ABOVE it add: -- global $db; $ip = $db->escape_string(preg_replace("#([^.0-9 ]*)#", $ip, "")); -- ===================== DONE =====================