Security Issues

Hi:

Could someone tell IF these security issues are still present on AP:
http://www.auditmypc.com/network-security/network-security-582006.asp

This is very important, IMO.

Later

:roll: :? :cry:

Hi:

It appears the security problem is related with magic_quotes_gpc.

If magic_quotes_gpc is disabled, a remote attacker could send specially-crafted SQL statements to the include/class_poll.php script using the User-Agent header value, which could allow the attacker to add, modify, or delete information in the back-end database.

An alternative is to be sure magic_quotes_gpc is ON.

Later

8)

Yes they are probably still valid but this is why AP 2.0.5 is in development and available on the downloads page.