[@_ck_ Participant 15 years, 7 months ago]

bbPress 0.9 users should install my unofficial “block-long-queries” mini-plugin to avoid the security bug that 1.0.3 fixes and similar unknown attacks in the future.

(it also works in 1.0 and WordPress)

<?php

/*

Plugin Name: Block Long Queries (for bbPress and WordPress)

*/



if (strlen($_SERVER['REQUEST_URI'])>255 ||

preg_match('@(eval|base64|unescape)[^a-zA-Z0-9]@si',$_SERVER['REQUEST_URI']))

{

header('HTTP/1.1 414 Request-URI Too Long');

header('Status: 414 Request-URI Too Long');

header('Connection: Close');

exit;

}