Security Issue Solution v7.5

Are, please check this item, post by istreen: (Multiple vulnerabilities)
http://www.deltascripts.com/board/topic … abilities/

In the zip the file: includes_patch1.txt is named as: includes_patch1.txt.txt and is empty.

For the XSS is need sanitize $_SERVER["PHP_SELF"].
In header_inc.php found

include_once("includes/common_public_inc.php");

Add next this line

$_SERVER["PHP_SELF"] = htmlspecialchars(cleanInput( $_SERVER["PHP_SELF"]));

the bug in inputfilter.php can be fixed as follows.
Original post on www.phpclasses.org by user Nashar on the 2007-12-31 08:19:07

regards

stubyh

Thanks alot Stubyh for the solution, but doesn't it degrade the security of the website?

Hi,

Reasons of Security Issues to Networks :-

There are multiple reasons for any network to get victimized by viruses, malware, worms and other security threats. Most common reasons for such security attacks in small sized companies are not using proper, licensed versions of Anti virus software. And of course using risky sites also download dangerous malware when network is not properly secured, which infects the entire network.
When any network uses non genuine, non licensed or cracked versions of anti virus and similar software, they do not update the latest virus signature file to protect the system till date. When new viruses are launched, this software doesn’t have latest viruses threats defined in their signature files, hence it exposes the entire network to these virus threats, and more often or a not network does get infected. As much as NA knowledge is important I couldn’t emphasize more on end user awareness as well. End users are those users who put the entire network to use and put on risk at the same time. Their education is very crucial and has importance as well. The end user education on security threats and how do avoid them can play major role in keeping network up and securely running.
There is another major type of attack which most of the companies ignore and eventually pay for it. These attacks are commonly known to be inside attacks. Ex employ of the company can be serious threat to the company networks, especially if ex employ had network related job, since all the critical information related network can be known in such cases, they can easily connect to the networks by making remote connecting using VPN, or through other sources, they can transfer viruses, malicious software which can leak secret and important information for organization point of view. There can be many other threats which can make any company life uneasy. To avoid such incidences, make sure to update all information, username and password as soon some one from network related jobs get vacant.
Admin information should always be updated once in 24hrs any way to keep network safe from any un wanted situations.
It is responsibility of NA to keep closer look to all the employees of the network, they should be award about their activities being logged and looked upon. There would be fewer chances of any inside security attacks if users are under an impression of being watched closely.
__________________________________________________________________________________________________

Buy Leads