Thread: PT security scanner test

CODE FIXED for admin/userlog.php and admin/adminlog.php
============================================

IN admin/userlog.php and admin/adminlog.php look for this LINE :
---------------------------------------------------------

echo $p_arr[Action];


REPLACE it with this :
---------------------------------------------------------

echo htmlentities($p_arr[Action]);

I should say PHRASE not LINE sorry

Just look for this : echo $p_arr[action];

Replace it with : echo htmlentities($p_arr[Action]);

The nearest match is below is that the one which needs to be changed.
Code:
<td align=center><? echo $p_arr[IP]?></td>
<td align=center><? echo $p_arr[action]?></td>

I think this :
$p_arr[action]

is same with :
$p_arr[action];


Maybe your copy of adminlog.php has no ";" semi colon after echo $p_arr[action]


Its ok to replace :
$p_arr[action]

With this :
htmlentities($p_arr[action])

Originally Posted by lodlock

You yourself could periodically run some brute force or dictionary attacts (dictionary first). That way you can find who's members passwords were easily hacked and request that they change them.

Please I can't follow you here. dictionary attacts and how do I do that? Do I need a special software?

Thanks in advance

IN admin/userlog.php and admin/adminlog.php look for this LINE :

Hello,

I cant find adminlog.php or userlog.php in the admin folder
I am using aedating 4.1.0004
Where to modificate my script then?

Thank you