RevCMS exploit fixes

[Spitty]

So after having finally fixed up my hotel the way I like, privately at that matter, it seems that people have managed to find exploits that are unrelated to the housekeeping. I have searched to find fixes for any RevCMS exploits but none seem to be of help. Really would appreciate if someone can shed some light for me!

[MentaL]

[Terrum]

Just to confirm, you tried following this fix, right? http://forum.ragezone.com/f353/revcms-fix-1012326/

[Spitty]

I sure did, and it's incredibly confusing, the posts also saying that it doesn't work, or it's pointless, and then a guy named spotify gave different solutions. I just want one that works

- - - Updated - - -

And incase this helps, when a registration is made, an md5 encryption is put into the 'seckey' column of the user, whilst I've seen on the password exploit fix thread that the default value need to be set to '1' or 'null' or something? Really hoping someone can help with this

[Spitty]

Bump! Anyone able to help?

[Spitty]

Bump! Still need help wiht this!

[Terrum]

You need to do the following:

Go to your 'app' folder and open 'class.core.php', and remove anything related to the forgot password, leaving the open/closed parameters that look like this:

{
}

Then do the same for 'class.users.php'.

And go into app/tpl/skins/Habbo and remove the 'register.php' file, depending on your skin, and remove all forgot password functions from 'index.php' and other templates within the folder that have forgot password related functions.

Good luck!