+--------------------------------------------------------------------------------+ | MyBB 1.2.14 - Security Update Patch File | | (c) 2008 MyBB Group. | | | | This patch file fixes some medium and low risk issues in MyBB 1.2.14 | | | | Please follow the instructions documented to manually patch your board. | +--------------------------------------------------------------------------------+ =============== 1. editpost.php =============== Find: -- $url = "polls.php?action=newpoll&tid=$tid&polloptions=".$mybb->input['numpolloptions']; -- Replace with: -- $url = "polls.php?action=newpoll&tid=$tid&polloptions=".intval($mybb->input['numpolloptions']); -- =============== 2. attachment.php =============== Find: -- if(strpos(strtolower($_SERVER['HTTP_USER_AGENT']), "msie") !== false && strpos($attachment['filetype'], "image") === false) -- Add After: -- if(strpos(strtolower($_SERVER['HTTP_USER_AGENT']), "msie") !== false) -- ALL DONE