phpwcms Support Forum

Hi y'all,

I think I found a small security issue in the guestbook. Perhaps I am a bit late or someone else found it already but ok.

Everybody who has access to the guestbook can use all replacement tags in a message in the guestbook/commentspart. Is that on purpose or should it be more secure?

Anyone has an idea or comment?

Cheers!

New release has a fix for it. No PHP possible.

Oliver

Thanks Oliver! I'll try it out a.s.a.p.!

Cheers!