phppp wrote:
Quote:

zyspec wrote:

I just looked at the source for the Japanese developed version (2.05 jp) and the specific problem identified has been fixed in this version.

If it's true, we should report it to secunia as a fault alarm.

zyspec wrote:
snip
Towards the bottom of the listing-p-f.php (or annonces-p-f.php depending on which version of MyAds you have) file you'll find the following code just before:

switch($op) {

You'll find:

le="color: #000000"><?php foreach ($_POST as $k => $v) { ${$k} = $v; } $lid = isset( $_GET['lid'] ) ? $_GET['lid'] : '' ; if(!isset($_POST['op']) && isset($_GET['op']) ) { $op = $_GET['op'] ; }

Just delete these lines or comment it out with // at the beginning of each line) and replace it with:

le="color: #000000"><?php $lid = isset( $_GET['lid'] ) ? intval($_GET['lid']) : '' ; $op = isset($_POST['op']) ? $_POST['op'] : '' ; $op = isset($_GET['op']) ? $_GET['op'] : $op ; $yname = isset($_POST['yname'] ? $myts->addSlashes($_POST['yname']) : ''; $ymail = isset($_POST['ymail'] ? $myts->addSlashes($_POST['ymail']) : ''; $fname = isset($_POST['fname'] ? $myts->addSlashes($_POST['fname']) : ''; $fmail = isset($_POST['fmail'] ? $myts->addSlashes($_POST['fmail']) : '';

Remember, place this BEFORE the switch($op) statement. By the way, the fix for the Job Listing module (jobs ver 1.9) is the same.