1 post / 0 new
scarecrow
SMF ADMIN PAGE PUBLICLY ACCESSIBLE!!!!!!!!!

The Plugin configuration page for IflyChat is publically accessiable and changeable without being logged in as the system throws the following errors:
 

8: Undefined variable: sourcedir

File: /home/**********/public_html/Sources/Subs-iflychat.php
Line: 35       

 

 

8: Undefined variable: sourcedir

File: /home/**********/public_html/Sources/Subs-iflychat.php
Line: 33       

 

8: Undefined index: iflychat_ext_d_i

File: /home/**********/public_html/Sources/Subs-iflychat.php

Line: 102       

 

2: Missing argument 2 for list_getGroups(), called in /home/********/public_html/Sources/Subs-iflychat.php on line 282 and defined

File: /home/*****/public_html/Sources/Groups.php
Line: 250       

 
This needs to be Fixed like IMMEDIATLY, this is a HUGE security risk if its not grabbing any groups for permissions to access the ADMINISTRATION PAGE. Like seriously?