[XBTIT VULNERABILITY] URGENT - PROTECTION FIX (ALL REVISIONS < 584)

[Lupin]

yes, I guess btit versions are affected by same vulnerabilities

[Delius]

I made the changes but pager in users.php didn't work properly (because $by_param isn't available in all cases). Then I made this change, from:

Code: [Select]

         if (isset($_GET["by"]))
           {
              $by_param=(int)$_GET["by"];
              $by=($by_param==1?"ASC":"DESC");
          }
          else
              $by="ASC";
to:

Code: [Select]

         if (isset($_GET["by"]))
          {
              $by_param=(int)$_GET["by"];
              $by=($by_param==1?"ASC":"DESC");
          }
          else
          {
              $by_param=1;
              $by="ASC";
          }
Is this ok?

Sorry my english and thanks a lot for your work

[Lupin]

yes, sorry I forgot this

[punsikorn]

Thanks for the fix!
gclub casino