serialize problem in bridge file (phpbb) related to security issue with php

[Joe Belmaati]

The security flaw in php <4.3.10 has caused me to add a fix to my phpbb per this hack:

http://phpbbstyles.com/viewtopic.php?t=1904

Supposedly it fixes the known seciurity problems with php<4.3.10 but it also breaks the bridge file. Is there a fix around for this...?

Sincerely, and thank you very much!
Joe Belmaati
Copenhagen Denmark

[Nibbler]

By the looks of it you can do the same with the bridge file, add the array
_unserialize function and change the call to unserialize to array_unserialize.

[Joe Belmaati]

Where would I add the function - in the bridge file right before the unserialize?

[Nibbler]

Add it just before function udb_authenticate()