UBB.Developers Forums UBB.classic V5 Mod Questions Security bug in 5.4x

Hello,

I think I discovered some kind of securitybug in 5.4x

It is possible to retrieve all logged IP numbers from posters by retrieving the link www.your_ubb.com/ubb/Forum1/000001.cgi

You can do this on any forum by just changing the ForumX and 00000x.cgi.

I don't want my visitors IP to show, but I do want it logged. I now have chmod all my 00000x.cgi files to 640, but whenever someone posts it is being set back to 666 again.

Am I doing something wrong here or if not and this really is a security bug that reveals the IP's of all visitors, does someone know all the exact chmod instructions to replace?


Should be:


Or am I wrong?

Thanks for your help,

CT.