phpBB 2.0.17

[AC]

?????? ????? ????? ????

???? ???? phpBB 2.0.17 ?? ???? ?? ????? ???????

????? ?????? ???????

http://www.phpbbarabia.com/files/go.php?id=221

?????? ???? ??????? ???? ??????? bugfixes ????? ???? ????? ????? ?????? ?????? ?? ????? IE ??? XSS ?????? ????????? ??? ??? ?????? ?? ??? ??????? ?? ????

http://forum.moffed.com/bb/about1288.html

???? ??? ?????? ??? ?????? IE ??? ?? ?????? ?????? ??????????? ?? ????? ,,,??? ????????? ?????? ?????? ??? ????? ?? Code ??? ????URL ????? ???? ???..?? ?? ???? ??? ?? ??? ????phpBB

1. ?? ??? ???? ?????? ????? ???? ?????? ?????? ???????? ?? ?????? ?????
2. ??? ??? ???? ???????? ???? ???? ??????? ??????? ???...?? ????? ??????? ??????? ?? ??????? ??????.

?????? ?????? !!

?? ??? ????? ??????? ???? ???? ???? ???? ???? ???? ???XSS!!

???? ????? includes/bbcode.php ????? ??

كود: تحديد الكل

   $patterns[] = "#\[url\]([\w]+?://[^ \"\n\r\t<]*?)\[/url\]#is"; 
   $replacements[] = $bbcode_tpl['url1']; 

   // [url]www.phpbb.com[/url] code.. (no xxxx:// prefix). 
   $patterns[] = "#\[url\]((www|ftp)\.[^ \"\n\r\t<]*?)\[/url\]#is"; 
   $replacements[] = $bbcode_tpl['url2']; 

   // [url=xxxx://www.phpbb.com]phpBB[/url] code.. 
   $patterns[] = "#\[url=([\w]+?://[^ \"\n\r\t<]*?)\]([^?\n\r\t].*?)\[/url\]#is"; 
   $replacements[] = $bbcode_tpl['url3']; 

   // [url=www.phpbb.com]phpBB[/url] code.. (no xxxx:// prefix). 
   $patterns[] = "#\[url=((www|ftp)\.[^ \"\n\r\t<]*?)\]([^?\n\r\t].*?)\[/url\]#is"; 

??????? ???????

كود: تحديد الكل

   $patterns[] = "#\[url\]([\w]+?://[\w\#$%&~/.\-;:=,?@\[\]+]*?)\[/url\]#is"; 
   $replacements[] = $bbcode_tpl['url1']; 

   // [url]www.phpbb.com[/url] code.. (no xxxx:// prefix). 
   $patterns[] = "#\[url\]((www|ftp)\.[\w\#$%&~/.\-;:=,?@\[\]+]*?)\[/url\]#is"; 
   $replacements[] = $bbcode_tpl['url2']; 

   // [url=xxxx://www.phpbb.com]phpBB[/url] code.. 
   $patterns[] = "#\[url=([\w]+?://[\w\#$%&~/.\-;:=,?@\[\]+]*?)\]([^?\n\r\t].*?)\[/url\]#is"; 
   $replacements[] = $bbcode_tpl['url3']; 

   // [url=www.phpbb.com]phpBB[/url] code.. (no xxxx:// prefix). 
   $patterns[] = "#\[url=((www|ftp)\.[\w\#$%&~/.\-;:=,?@\[\]+]*?)\]([^?\n\r\t].*?)\[/url\]#is"; 

?? ???? ??

كود: تحديد الكل

   $ret = preg_replace("#(^|[\n ])([\w]+?://[^ \"\n\r\t<]*)#is", "\\1<a href=\"\\2\" target=\"_blank\">\\2</a>", $ret); 

   // matches a "www|ftp.xxxx.yyyy[/zzzz]" kinda lazy URL thing 
   // Must contain at least 2 dots. xxxx contains either alphanum, or "-" 
   // zzzz is optional.. will contain everything up to the first space, newline, 
   // comma, double quote or <. 
   $ret = preg_replace("#(^|[\n ])((www|ftp)\.[^ \"\t\n\r<]*)#is", "\\1<a href=\"http://\\2\" target=\"_blank\">\\2</a>", $ret); 

??????? ???????

كود: تحديد الكل

   $ret = preg_replace("#(^|[\n ])([\w]+?://[\w\#$%&~/.\-;:=,?@\[\]+]*)#is", "\\1<a href=\"\\2\" target=\"_blank\">\\2</a>", $ret); 

   // matches a "www|ftp.xxxx.yyyy[/zzzz]" kinda lazy URL thing 
   // Must contain at least 2 dots. xxxx contains either alphanum, or "-" 
   // zzzz is optional.. will contain everything up to the first space, newline, 
   // comma, double quote or <. 
   $ret = preg_replace("#(^|[\n ])((www|ftp)\.[\w\#$%&~/.\-;:=,?@\[\]+]*)#is", "\\1<a href=\"http://\\2\" target=\"_blank\">\\2</a>", $ret);

??????? 2.0.16 ???

???? ????? ?????? ???? ??????? ????? phpbb_2.0.16_to_2.0.17.txt ?? ???? ???? install ??? ?????? ????? ?? ??????? ????? update_to_latest.php ??? ???? ???? install ???? ????? ????? ????? ?????? ???????? ?????? ??????? ??? ??????? ?? ???? ??????..

??????

[AC]

???? ??? ?????? ??? ??????? ?? ??? ???????

http://www.phpbbarabia.com/board/viewtopic.php?t=16371