Обновление безопасности IP.Blog 1.2.4

[Xander]

Для тех кто не заходит на www.invisionpower.com:

 

Файл:

modules/blog/lib/entry_reply_entry.php

 

Найти:

		//-------------------------------------------------
	// Do we have the information needed
	//-------------------------------------------------
	if (!isset( $this->ipsclass->input['eid'] ) or !intval( $this->ipsclass->input['eid'] ) )
	{
		$this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );
	}

	//-------------------------------------------------
	// Load the entry
	//-------------------------------------------------
	$this->entry = $this->ipsclass->DB->build_and_exec_query( array ( 'select'	=>	'*',
												   'from'	=>	'blog_entries',
												   'where'	=>	"entry_id = {$this->ipsclass->input['eid']}"
										 )		 );

 

Заменить на:

		//-------------------------------------------------
	// Do we have the information needed
	//-------------------------------------------------
	$eid = intval($this->ipsclass->input['eid']);
	if ( !$eid )
	{
		$this->ipsclass->Error( array( 'LEVEL' => 1, 'MSG' => 'missing_files') );
	}

	//-------------------------------------------------
	// Load the entry
	//-------------------------------------------------
	$this->entry = $this->ipsclass->DB->build_and_exec_query( array ( 'select'	=>	'*',
												   'from'	=>	'blog_entries',
												   'where'	=>	"entry_id = {$eid}"
										 )		 );

 

Подробнее вы можете прочитать здесь