View Single Post
Old 2005-09-03, 07:38 PM   #1
cd34
a.k.a. Sparky
 
cd34's Avatar
 
Join Date: Sep 2004
Location: West Palm Beach, FL, USA
Posts: 2,396
Autolinks exploit, affects even the current 2.1

For those of you running autolinks, there is a recent exploit that allows them to do a remote include and launch a DOS attack from your website. The problem is pretty much based on poor sanitization of data in al_initialize.php

put this in your .htaccess in the same directory where al_initialize.php exists.

Code:
RewriteEngine on
RewriteRule al_initialize.php - [F]
__________________
SnapReplay.com a different way to share photos - iPhone & Android
cd34 is offline   Reply With Quote