Strictly speaking it's not a bug in OPN but a bug in PHP. This hotfix blocks intrusions via manipulated PHPSession variables.

Luckily an unpatched OPN 2.2.3 can withstand such attacks, but there may remain 'dead' processes on the webserver. The worst case at somehow weak webservers may be the whole webserver may be compromised.

We recommend to install this hotfix asap.

Find the hotfix here:

Zipfile
Tarfile

We guess other PHP scripts may be also concerned. So if you are using other PHP scripts and projects please watch there for security fixes and install them immediately.

Yours,
OPN-Team

We send x-mas greetings to all our members and guests.




Wishing all the best for peaceful christmas days and a happy new year 2005.


Also we weant to thank you for your support to this project in 2004






your OPN-Team

To download the files you must be registered and logged in!

Find the full version here: opn 2.2.2

Find the patch here: update opn 2.2.1 to 2.2.2

openphpnuke-2.2.2-full.* - The whole OPN, with modules and all languages included
openphpnuke-2.2.2-core.* - OPN without the modules
openphpnuke-2.2.2-modules-full.* - Only the modules complete
openphpnuke-2.2.2-module-xxx.* - single modules(only these who have changed since 2.2.1 )

If you have already installed 2.2.1 you can use the patch files
openphpnuke-2.2.1-to-2.2.2-* . These files contain only the changes since version 2.2.1 .


We recommend to use the *.tgz oder *.tar.bz2 files.
These are much smaller than Zip's. Windows can use theses files without trouble:
*.tgz can be handled with Powerarchiver, Winzip or Winrar.
Powerarchiver or Winrar can handle *.tar.bz2 . A pure " tar for Windows" is available as gnuwin32.


The OPN-Team

OpenPHPNuke 2.2.1 Bugfix Release available

To download the files you must be registered and logged in!

Find the full version here: opn-2.2.1

Find the patch here: opn-2.2.0-to-2.2.1


openphpnuke-2.2.1-full.* - The whole OPN, with modules and all languages included
openphpnuke-2.2.1-core.* - OPN without the modules
openphpnuke-2.2.1-modules-full.* - Only the modules complete
openphpnuke-2.2.1-module-xxx.* - single modules(only these who have changed since 2.2.0 )

If you have already installed 2.2.0 you can use the patch files
openphpnuke-2.2.0-to-2.2.1-* . These files contain only the changes since version 2.2.0 .


We recommend to use the *.tgz oder *.tar.bz2 files.
These are much smaller than Zip's. Windows can use theses files without trouble:
*.tgz can be handled with Powerarchiver, Winzip or Winrar.
Powerarchiver or Winrar can handle *.tar.bz2 . A pure " tar for Windows" is available as gnuwin32.


The OPN-Team

OpenPHPNuke 2.2.0 Release available

To download the files you must be registered and logged in!

Find the full version here:
opn-2.2.0

Find the patch here
opn-2.1.2-to-2.2.0


openphpnuke-2.2.0-full.* - The whole OPN, with modules and all languages included
openphpnuke-2.2.0-core.* - OPN without the modules
openphpnuke-2.2.0-modules-full.* - Only the modules complete
openphpnuke-2.2.0-module-xxx.* - single modules(only these who have changed since 2.1.2 )

If you have already installed 2.1.2 you can use the patch files
openphpnuke-2.1.2-to-2.2.0-* . These files contain only the changes since version 2.1.2 .


We recommend to use the *.tgz oder *.tar.bz2 files.
These are much smaller than Zip's. Windows can use theses files without trouble:
*.tgz can be handled with Powerarchiver, Winzip or Winrar.
Powerarchiver or Winrar can handle *.tar.bz2 . A pure " tar for Windows" is available as gnuwin32.


The OPN-Team