From owner-freebsd-ports-bugs@FreeBSD.ORG  Sat May  1 11:20:12 2004
Return-Path: <owner-freebsd-ports-bugs@FreeBSD.ORG>
Delivered-To: freebsd-ports-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4105F16A50A
	for <freebsd-ports-bugs@hub.freebsd.org>;
	Sat,  1 May 2004 11:20:12 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2AF9543D46
	for <freebsd-ports-bugs@hub.freebsd.org>;
	Sat,  1 May 2004 11:20:12 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	i41IKCVB093371	for <freebsd-ports-bugs@freefall.freebsd.org>;
	Sat, 1 May 2004 11:20:12 -0700 (PDT)
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.11/8.12.11/Submit) id i41IKB3P093370;
	Sat, 1 May 2004 11:20:12 -0700 (PDT)
	(envelope-from gnats)
Date: Sat, 1 May 2004 11:20:12 -0700 (PDT)
Message-Id: <200405011820.i41IKB3P093370@freefall.freebsd.org>
To: freebsd-ports-bugs@FreeBSD.org
From: Xin LI <delphij@frontfree.net>
Subject: Re: ports/66150: [PATCH] SECURITY UPDATE ports/www/phpbb for IP
	spoofing vulnerablity
X-BeenThere: freebsd-ports-bugs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Xin LI <delphij@frontfree.net>
List-Id: Ports bug reports <freebsd-ports-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>,
	<mailto:freebsd-ports-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports-bugs>
List-Post: <mailto:freebsd-ports-bugs@freebsd.org>
List-Help: <mailto:freebsd-ports-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>,
	<mailto:freebsd-ports-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 01 May 2004 18:20:12 -0000

The following reply was made to PR ports/66150; it has been noted by GNATS.

From: Xin LI <delphij@frontfree.net>
To: FreeBSD-gnats-submit@FreeBSD.org
Cc: vuxml@FreeBSD.org, Kang LIU <liukang@bjut.edu.cn>,
	portmgr@FreeBSD.org
Subject: Re: ports/66150: [PATCH] SECURITY UPDATE ports/www/phpbb for IP spoofing vulnerablity
Date: Sun, 2 May 2004 02:10:52 +0800

 --45Z9DzgjV8m4Oswq
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 Oops, forgot the attachment, it should be:
 
 Index: includes/sessions.php
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
 RCS file: /cvsroot/phpbb/phpBB2/includes/Attic/sessions.php,v
 retrieving revision 1.58.2.10
 diff -u -r1.58.2.10 sessions.php
 --- includes/sessions.php	5 Apr 2003 12:04:33 -0000	1.58.2.10
 +++ includes/sessions.php	17 Apr 2004 07:48:20 -0000
 @@ -147,7 +147,7 @@
  		$sql =3D "INSERT INTO " . SESSIONS_TABLE . "
  			(session_id, session_user_id, session_start, session_time, session_ip, =
 session_page, session_logged_in)
  			VALUES ('$session_id', $user_id, $current_time, $current_time, '$user_i=
 p', $page_id, $login)";
 -		if ( !$db->sql_query($sql) )
 +		if ( $user_id !=3D ANONYMOUS && !$db->sql_query($sql) )
  		{
  			message_die(CRITICAL_ERROR, 'Error creating new session', '', __LINE__,=
  __FILE__, $sql);
  		}
 @@ -380,4 +380,4 @@
  	return $url;
  }
 =20
 -?>
 \ No newline at end of file
 +?>
 
 
 --=20
 Xin LI <delphij frontfree net>	http://www.delphij.net/
 See complete headers for GPG key and other information.
 
 
 --45Z9DzgjV8m4Oswq
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.2.4 (FreeBSD)
 
 iD8DBQFAk+gsOfuToMruuMARAi/8AJ966cGY3YBeCFYs5ANmxhG1kd00sACffDrw
 eHQuUJbkKwTBaeNADCLmxdY=
 =PtF9
 -----END PGP SIGNATURE-----
 
 --45Z9DzgjV8m4Oswq--