+--------------------------------------------------------------------------------+ | MyBB 1.4.6 - Security Update Patch File | | (c) 2009 MyBB Group. | | | | This patch file fixes one high risk issue in MyBB 1.4.6 | | | | Please follow the instructions documented to manually patch your board. | +--------------------------------------------------------------------------------+ =============== 1. inc/datahandlers/user.php =============== Find: -- $this->user_update_data['birthdayprivacy'] = $user['birthdayprivacy']; -- Replace with: -- $this->user_update_data['birthdayprivacy'] = $db->escape_string($user['birthdayprivacy']); -- =============== 2. inc/class_core.php (Version number change) =============== Find: -- /** * The friendly version number of MyBB we're running. * * @var string */ var $version = "1.4.6"; /** * The version code of MyBB we're running. * * @var integer */ var $version_code = 1406; -- Replace with: -- /** * The friendly version number of MyBB we're running. * * @var string */ var $version = "1.4.7"; /** * The version code of MyBB we're running. * * @var integer */ var $version_code = 1407; -- ALL DONE