Joined: 10 Aug 2002 Posts: 16776955 Location: Portland, Oregon USA
Posted: Tue Mar 17, 2009 10:46 pm Post subject:
Sorry to have taken so long to get back to you on this.
You are correct in that the exact phrase search does not work. I thought we were running a standard phpBBS search module, but have discovered in my ancient notes a mention from Chris that the module was altered to disallow a vulnerability via the exact search function.
I've been looking for a version of our search function module, but have only come up with updated versions (yes, ours is that old!).
The question is, "Is this worth pulling our programmer away from existing projects to fix this"? I'm leaning toward leaving it as is and placing it on my "minor things to do" list.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum