Autolinks exploit, affects even the current 2.1

[cd34]

For those of you running autolinks, there is a recent exploit that allows them to do a remote include and launch a DOS attack from your website. The problem is pretty much based on poor sanitization of data in al_initialize.php

put this in your .htaccess in the same directory where al_initialize.php exists.

RewriteEngine on
RewriteRule al_initialize.php - [F]