1.2.0 Beta4 is now available. This fixes a SQL injection hole with the browse mode. I HIGHLY URGE all 1.2.0 users to upgrade ASAP.
The hacker is using search engines to find running phpBB Garages and then targeting them.
For a fresh install please down from http://forums.phpbbgarage.com/dload.php ... &cat_id=11
For a upgrade from 1.0.5 please download from http://forums.phpbbgarage.com/dload.php ... &cat_id=10
For a upgrade from 1.2.0 BetaX please just upload all files from tje fresh install ZIP.
Again sorry for the hassle. I hope this is the last security update I have to do. With me not being online as much it meant I was only aware of this issue yesterday. So I am happy enough that a 24 hour window to get a complete fix out the door.
Just also wanted to remind people that BETA software should but be used live. I run it here and I accept that risk, but you need to be fully aware of the risks.
Also please all make sure you have good backups. Mine were only 50% working. My posts/topics were not being backed up for the last year. Which is a real bummer for the site. I have resolved this issue now should I ever need it again.
So please make sure you update your sites ASAP. We phpBB Garage running on 100's of sites it appears the hackers have now spotted us
but I hope there is no other hole at this time.
Regards
Esmond
