Web Wiz Forums v7.8 - security update

Web Wiz Forums version 7.8 has been released today and addresses some security problems with previous versions. If you are running an older version you should upgrade IMMEDIATELY.

A report was received today at Web Wiz Guide detailing security bug issues relating to Web Wiz Forums 7.7a or below.

In response to this I have spent most of the morning working on a new version of Web Wiz Forums, version 7.8, which has been released and fixes these security bugs as well as tightening up security in a number of other areas.

If you are running a version of Web Wiz Forums prior to version 7.8, you should upgrade IMMEADIATLY, in order to keep your forum secure.

Download Web Wiz Forums 7.8

Download Web Wiz Forums 7.7a to 7.8 security patch update file

IMMEIDATE UPDATE WARNING FOR PATCH FILE USERS
If you downloaded the patch file only (this does not effect the full 7.8 version) before the 3rd of May 10am GMT, then you need to re-download this zip file immediatly as an important file, in the rush to release this zip file, was left out.

Edited by -boRg-

Borg, probably not a big deal but it looks like you might have made a change to the common.asp file as well. (Just based on the date of the file)

There are some problems in pop_up_topic_admin.asp .

1. At line 228 the code looks for a field in the database that doesn't exist (probably the moderate field for 8.0 version).

blnHidden = CBool(objRs("Hide"))

I suggest to delete or comment code line.

2. At line 349 is required strTxtHideTopic variabile.
I suggest to delete or comment code lines from line 348 to 351

<tr bgcolor="<% = strTableColour %>" background="<% = strTableBgImage %>">       <td align="right" valign="top" bgcolor="<% = strTableColour %>" background="<% = strTableBgImage %>" class="text"><% = strTxtHideTopic %>:</td>       <td bgcolor="<% = strTableColour %>" background="<% = strTableBgImage %>"><input type="checkbox" name="hidePost" value="true" <% If blnHidden = True Then Response.Write(" checked") %> /> <span class="smText"><% = strTxtIfYouAreShowingTopic %></span></td>      </tr>

3. At line 149 the same field is required.
Delete or comment code line

.Fields("Hide") = blnHidden

It's a bit hard to anwser these questions like this.

If you have a support question, so that it can be answered properly please open a new topic and ALSO INCLUDE THE VESRION YOU ARE USING! eg Database type, lite of full version.