Possible security issue

[Ian]

Look at this thread, http://beta.vbulletin.com/vb3/showthread.php?threadid=436 notice how it has 6 pages of posts. If I turn the URL into http://beta.vbulletin.com/vb3/showthread.php?threadid=436&perpage=999999 it shows every post in the thread, this could put a big strain on the server. vB2 is also effected by this.

[Freddie Bingham]

I thought we had fixed that awhile ago

[Ian]

I have a feeling the thread listing page is also affected by this but I was unable to test it.

[Ian]

Thanks for the update freddie, I have already applied the fix for my message board, I just want to make sure the code gets in vB3.

[Freddie Bingham]

Originally posted by Ian
Thanks for the update freddie, I have already applied the fix for my message board, I just want to make sure the code gets in vB3. And what happens now?

[Ian]

Originally posted by freddie
And what happens now? I'm not talking about my message board :) I'm talking about the vB3 beta board.

[Freddie Bingham]

Originally posted by Ian
I'm not talking about my message board :) I'm talking about the vB3 beta board. And so was I.

[Ian]

Originally posted by freddie
And so was I. Now you fixed it... I swear just like a hour ago that URL thing worked on the beta board.