Re: MkPortal Urlobox Cross Site Request Forgery

[securityfocus@visiblesoul.com]

I was wrong about this issue in my previous post.

Unofficial Solution:

FIND in /mkportal/modules/urlobox/index.php:
                        $message = 
preg_replace('/\[URL=(.+?)\](.+)\[\/URL\]/',$no_url,$message);
                        $message = 
preg_replace('/\[IMG\](.+?)\[\/IMG\]/',$no_img,$message);


REPLACE WITH:
                        $message = 
preg_replace('/\[URL=(.+?)\](.+)\[\/URL\]/i',$no_url,$message);
                        $message = 
preg_replace('/\[IMG\](.+?)\[\/IMG\]/i',$no_img,$message);

-=DKC=-