Все, закончил. Суть патча мне, к сожалению, малопонятна, но вот код, крайне рекомендованный производителем:
Код:
Index: forumdisplay.php
===================================================================
--- forumdisplay.php (revision 79648)
+++ forumdisplay.php (working copy)
@@ -175,7 +175,7 @@
{
if (($check = verify_client_string($vbulletin->GPC['postvars'])) !== false)
{
- $temp = unserialize($check);
+ $temp = json_decode($check, true);
if ($temp['do'] == 'doenterpwd')
{
$vbulletin->GPC['postvars'] = '';
Index: includes/functions_misc.php
===================================================================
--- includes/functions_misc.php (revision 79648)
+++ includes/functions_misc.php (working copy)
@@ -686,7 +686,8 @@
}
else if ($vbulletin->superglobal_size['_POST'] > 0)
{
- return '<input type="hidden" name="postvars" value="' . htmlspecialchars_uni(sign_client_string(serialize($_POST))) . '" />' . "\n";
+ $string = json_encode($_POST);
+ return '<input type="hidden" name="postvars" value="' . htmlspecialchars_uni(sign_client_string($string)) . '" />' . "\n";
}
else
{
@@ -703,7 +704,7 @@
*/
function construct_hidden_var_fields($serializedarr)
{
- $temp = unserialize($serializedarr);
+ $temp = json_decode($serializedarr, true);
if (!is_array($temp))
{