[tc4me]

Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!

But there is a bug in creating multiple profile fields

go to:
inc / functions_post.php (near ~ line 445) after

PHP code:


if($post['fieldvalue_option'] != '')
{
    eval("\$post['fieldvalue'] .= \"".$templates->get("postbit_profilefield_multiselect")."\";");
}



and insert directly below:

PHP code:


$post['fieldvalue_option'] = '';