Death Addict - Death is One Hell of a Drug | 1, 2 and 3-letter domains | Advertise Here | Advertise Here
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
  2. Attention buyers: Please take the time to read THIS
    Dismiss Notice
  3. I have imposed a new requirement today limiting who can start and receive private conversations. This is in an effort to thwart scammers who have a zero post count but private message others offering to sell their licenses. The restriction is not strict, a user must post at least one (1) post in the forum before being allowed to start and/or receive private conversations. Read Forum Post
    Dismiss Notice
  4. Dismiss Notice
Dismiss Notice
Introducing the new Classifieds Section

Please see HERE for more info.

Official Potential Security Issue Found in vBulletin Connect 5.1.2.

Discussion in 'vBulletin' started by EL Paper Boy, Aug 17, 2014.

  1. EL Paper Boy

    EL Paper Boy Member

    Local Time:
    4:05 AM
    An issue has been found in vBulletin 5.1.2 that could make all of your attachments public. We have created a patch for this and updated the download package. This issue only affects users that have already upgraded to 5.1.2. As this patch requires changes to the database, please read the instructions below carefully.

    Installing the patch
    Please follow the appropriate steps below.

    If you download the patch files:
    1. Upload the files provided in the patch.
    2. Run the database update script provided by entering the URL in your browser. This script is in the /core/install folder. You would run this script from that location. Example:
    3. Delete the /core/install folder when the script has finished.
    If you downloaded the entire vBulletin Connect 5.1.2 PL3 package:
    1. Upload all files located in the /upload folder, replacing the ones currently on your server.
    2. Upload fixattachpublic.php from the do_not_upload folder on your local machine to /core/admincp/ on your server.
    3. Run the database update script by entering your domain followed by /core/admincp/fixattachpublic.php into your browser. Example:
    4. When the script is finished, delete it.
    If you haven't upgraded to 5.1.2, the fix is not needed. Any code changes needed will be applied when you upgrade automatically. If you do not apply this fix directly, it will be applied automatically when you upgrade to vBulletin 5.1.3.

    The patch is available at

    Continue reading...

Share This Page