[BUGFIX] Security Hole in Gender_Mod

Hallo/Hy everybody

dieses Post richtet sich an alle, die den Gender Mod bei sich installiert haben. Bitte nehmt folgende Änderungen vor.

this post might be very important for everybody who has installed the gender mod on his (of course hers too Wink

)phpBB. Please carry out following changes:

open usercp_register.php:

Code:

/**************FIND****************/
$gender = ( isset($HTTP_POST_VARS['gender']) ) ? $HTTP_POST_VARS['gender'] : 0;

/*********REPLACE WITH************/
$gender = ( isset($HTTP_POST_VARS['gender']) ) ? intval ($HTTP_POST_VARS['gender']) : 0;

This Problem is not unknown/Dieses Problem ist nicht unbekannt:
http://www.securitytracker.com/alerts/2002/Jul/1004869.html

Mfg/greetings
Tom