[XBTIT VULNERABILITY] URGENT - PROTECTION FIX (ALL REVISIONS < 584)

[Lupin]

yes, I guess btit versions are affected by same vulnerabilities

[Delius]

I made the changes but pager in users.php didn't work properly (because $by_param isn't available in all cases). Then I made this change, from:

Code:

         if (isset($_GET["by"]))
           {
              $by_param=(int)$_GET["by"];
              $by=($by_param==1?"ASC":"DESC");
          }
          else
              $by="ASC";

to:

Code:

         if (isset($_GET["by"]))
          {
              $by_param=(int)$_GET["by"];
              $by=($by_param==1?"ASC":"DESC");
          }
          else
          {
              $by_param=1;
              $by="ASC";
          }

Is this ok?

Sorry my english and thanks a lot for your work

[Lupin]

yes, sorry I forgot this