I hate PhoenixPHP but I like PHP and fixing exploits so here goes...
1. Open index.php
2. Search for: elseif(isset($_GET["error"]) && $_GET["error"] == "ban")
3. Replace the lines of under it with this;
PHP Code:if(isset($_GET["user"]))
{
$query = mysql_query("SELECT * FROM bans WHERE value = '".$core->EscapeString($_GET["user"])."' AND expire > UNIX_TIMESTAMP() ORDER BY expire DESC LIMIT 1");
}
elseif(isset($_GET["ip"]))
{
$query = mysql_query("SELECT * FROM bans WHERE value = '".$core->EscapeString($_GET["ip"])."' AND expire > UNIX_TIMESTAMP() ORDER BY expire DESC LIMIT 1");
}
Originally Posted by wy479
