Quote:
Originally Posted by Porn Ass
makes me wonder how bad his paid version is 
|
considering the paid version hasn't had any exploits come up in a year or more... This is a FREE version which is a modified core of a free script that's been available for 2+ years When I updated it last I simply used the wrong package which didn't have this fix in like 4 files, one of which was a file that isn't even used anymore.
That exploit that is public knowledge of my script was based on a special release I did of V1.4 which littered dozens of warez sites with a version of this script that had exploits CODED INTO IT. I did this so that I can take 2 seconds to knock down an illegal site.
The free script is NOT a focus for me as far as support or any other aspect, my focus is on the paid scripts. When I re-released this free version I simply searched my hard drive for that free.zip file and started with the first one I found and that exploit is fixed with a simple (int) to clean the form fields. I also tossed in a fix for remote form submissions inside config.php
Please use free2.zip for now, free.zip will be fixed when I get back home.