لاتعتبر حل لانك شفرت كلمة فقط ليفشل الكود ولكن الثغره مازالت
الثغره في ملف functions_bbcodeparse.php
والحل
قم بابحث عن
[php]
كود PHP:
$bbcodes['custom']['recurse']['highlight'][0] = array('replace_html' => "<span class=\"highlight\">\\7</span>");
وقم باضافه هذا الكود بعده
كود PHP:
$bbcodes['custom']['find']['[poem'] = '#\[poe[m](\s|"|"|\'|)(.*)\\1\](<br>|<br />|\r\n|\n|\r)??(.*)(<br>|<br />|\r\n|\n|\r)??\[/poe[m]\]#esiU';
$bbcodes['custom']['replace']['[poem'] = "handle_bbcode_normal('\\4', '\\2', '', 'poem')";
$bbcodes['custom']['recurse']['poem'][0] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['[frame='] = '#\[frame=("|"|\'|)([0-9]+)[ ]+([0-9]+)[ ]*\\1\](<br>|<br />|\r\n|\n|\r)??(.*)(<br>|<br />|\r\n|\n|\r)??\[/frame\]#esiU';
$bbcodes['custom']['replace']['[frame='] = "handle_bbcode_normal('\\5', '\\2', '\\3', 'frame')";
$bbcodes['custom']['recurse']['frame'][0] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['[grade='] = '#\[grade("|"|\'|)(.*)\\1\](<br>|<br />|\r\n|\n|\r)??(.*)(<br>|<br />|\r\n|\n|\r)??\[/grade\]#esiU';
$bbcodes['custom']['replace']['[grade='] = "handle_bbcode_normal('\\4', '\\2', '', 'grade')";
$bbcodes['custom']['recurse']['grade'][0] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['--------------------------------------------------------------------------------'] = '#\[hr\]#esiU';
$bbcodes['custom']['replace']['--------------------------------------------------------------------------------'] = "handle_bbcode_normal('hr', '', '', 'hr')";
$bbcodes['custom']['recurse']['hr'][0] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['--------------------------------------------------------------------------------'] = '#\[line\]#esiU';
$bbcodes['custom']['replace']['--------------------------------------------------------------------------------'] = "handle_bbcode_normal('line', '', '', 'hr')";
$bbcodes['custom']['recurse']['line'][0] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['[flash='] = '#\[flash=("|"|\'|)(.*)\\1\](width=)\\1([0-9]+)\\1[ ]+(height=)\\1([0-9]+)\\1\[/flash\]#esiU';
$bbcodes['custom']['replace']['[flash='] = "handle_bbcode_normal('\\2', '\\4','\\6', 'flash')";
$bbcodes['custom']['recurse']['flash'][0] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['[flash='] = '#\[flash=("|"|\'|)(.*)\\1\](height=)\\1([0-9]+)\\1[ ]+(width=)\\1([0-9]+)\\1\[/flash\]#esiU';
$bbcodes['custom']['replace']['[flash='] = "handle_bbcode_normal('\\2', '\\6','\\4', 'flash')";
$bbcodes['custom']['recurse']['flash'][1] = array('handler' => 'handle_bbcode_normal');
$bbcodes['custom']['find']['[flash='] = '#\[flash=("|"|\'|)(.*)\\1\]([w|W][i|I][d|D][t|T][h|H][=])\\1([0-9]+)\\1[ ]+([h|H][e|E][i|I][g|G][h|H][t|T][=])\\1([0-9]+)\\1\[/flash\]#esiU';
$bbcodes['custom']['replace']['[flash='] = "handle_bbcode_normal('\\2', '\\4','\\6', 'flash')";
$bbcodes['custom']['recurse']['flash'][0] = array('handler' => 'handle_bbcode_normal');
//
اظن الذي كشف الثغره العندليب وقام بحلها
راجعوا احد مواضيع العندليب فأظن بها توسع اكثر من ذالك
الى اللقاء