2.0.16 有安全性修正 , 而且在最常被存取的 viewtopic.php :
$message = str_replace(""", """, substr(@preg_replace("#(\>(((?>([^>< ]+|(?R)))*)\<))#se", "@preg_replace("#\b(" . str_replace("", "", $highlight_match) . ")\b#i", "<span style="color:#" . $theme["fontcolor3"] . ""><b>\1</b>", "\0")", ">" . $message . "< "), 1, -1));改為
$message = str_replace(""", """, substr(@preg_replace("#(\>(((?>([^>< ]+|(?R)))*)\<))#se", "@preg_replace("#\b(" . str_replace("", "", addslashes($highlight_match)) . ")\b#i", "<span style="color:#" . $theme["fontcolor3"] . ""><b>\1</b>", "\0")", ">" . $message . "< "), 1, -1));更新範圍列表如下 :
- Fixed critical issue with highlighting – Discovered and fix provided by Ron van Daal
- Url descriptions able to be wrapped over more than one line again
- Fixed bug with eAccelerator in admin_ug_auth.php
- Check new_forum_id for existence in modcp.php – alessnet
- Prevent uploading avatars with no dimensions – Xpert
- Fixed bug in usercp_register.php, forcing avatar file removal without updating avatar informations within the database – HenkPoley
- Fixed bug in admin re-authentication redirect for servers not having index.php as one of their default files set
官方公告 在此 .
竹貓星球 也發出了 這篇公告 .
)
12 月 28 2005
詭異的 eAccelerator
從幾個禮拜前我就在我的 BBS 個人板叫過, 我的 Apache 啟動後過不了多久就會狂噴這種訊息到 error log 裡 :
而且 child process 的數量只會一直增加, 不會減少.
如果我沒記錯的話, 這串訊息出現在我把 2.0.54 換成 2.0.55 以後.
所以當時我是決定把 2.0.55 換成 2.2 .
很不幸的, 狀況並沒有變動, 訊息仍然存在.
我一直以為是 Apache 的問題, 直到我在昨天看到 這篇 才恍然大悟. orz
很明顯的, 罪魁禍首是 eAccelerator , 問題出在 debug.c 這支程式的這段:
void ea_debug_shutdown () { fflush (F_fp); fclose (F_fp); F_fp = NULL; }把
fclose (F_fp);換成if (F_fp != stderr) fclose (F_fp);, 重新 compile & install 就沒事了.話說回來, 這種 bug 還真是讓人無言以對啊…
By Joe Horn • WWW 0 • Tags: Apache, eAccelerator