Announcement

Collapse
No announcement yet.

is that necessary to use "base64_decode" function

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Lynne
    replied
    Ah, good to know (I suppose ) I guess I just never noticed that being used in the vb code. Whenever I've seen it discussed, it's been a hacker using it.

    Leave a comment:


  • sahareto
    replied
    yes its based on the vb files from ago
    and really disable this function is very important to prevent some hacker methods
    and I want to know, can vb developer discuss this and how its important to use this function in cron and attachment
    and can the developer replace this function can be safe better ?
    and thanks for advice

    Leave a comment:


  • SecondV
    replied
    Originally posted by Lynne View Post
    That is not default vbulletin. If you download the files from the vb.com download area and look at them, those lines are not in there. It looks like they have been added to your files.
    Actually it is part of default vbulletin.

    cron.php uses base64_decode to show a blank gif file, as does attachment.php

    Leave a comment:


  • Lynne
    replied
    That is not default vbulletin. If you download the files from the vb.com download area and look at them, those lines are not in there. It looks like they have been added to your files.

    Leave a comment:


  • sahareto
    started a topic is that necessary to use "base64_decode" function

    is that necessary to use "base64_decode" function

    is that necessary to use "base64_decode" function
    becouse I want to but it in php.ini disable_function

    and this function found on this file

    PHP Code:
    attachment.php:290:             $filedata base64_decode('R0lGODlhAQABAIAAAMDAwAAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==');
    cron.php:44:$filedata base64_decode('R0lGODlhAQABAIAAAMDAwAAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==');
    includes/functions.php:2244:            return ($decode base64_decode($return) : $return); 
    and when I disable this function its give me base64_decode is disable for security reason

    I want to disable this function because some shell file decode them files to base64
    my vbulletin version 3.8.4 patch level 1
widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
Working...
X