For those who use the Protector, you need to be aware of [waraxe-2004-SA#025 - Multiple vulnerabilities in Protector System 1.15b1 for PhpNuke] latest Security Focus alert.

ThePacketMaster writes:

I'm using PHP Nuke 6.5 and was editing a block that downloads headlines from a web site. I made a change to the block, using the edit feature and then it came back saying there was a problem with the content. After doing a packet sniff and seeing the HTTP request was being rejected, I poked around the /admin/blocks.php, and found this line (line 618):

fputs($fp, "GET " . $rdf['path'] . "?" . $rdf['query'] . " HTML/1.0\r\n");

It should be:

fputs($fp, "GET " . $rdf['path'] . "?" . $rdf['query'] . " HTTP/1.0\r\n");

Once I made this change, everything was fine. I don't know if this is fixed in later versions of PHP.

Admin Note: This is still in 6.9, however FB has been notified and hopefully it will be corrected in 7.0. I have corrected it in my download packages effective now.

User Blith discovered that when more than 9 registered users are logged on that all PM's after the ninth one go to the ninth one. Not sure how/why that was happening but I rewrote the block and it appears that all is well now. When you download the block, you only need to replace the block-Site_Info.php file. Sorry!

Chatserv has fixed a couple of bugs in his original distribution of the fixpack. I have incorporated those fixes to my virign 6.5 download with the fixpack 4 applied. If you downloaded prior to 10:00 am 7/4/2003 and are experiencing any problems, you might want to download again to see if the problems are now fixed.

Collection of fixes for PHP-Nuke 6.5, they could apply to 6.6 & 6.7 but fixes would have to be done manually. Includes fix list and instructions for making the changes manually for those with modified files that don't want to lose those modifications but includes the modified files as well. Read the fixlist file for more details. Get more information and download here.

Admin Note:I have added a download from my downloads section that is the virgin nuke v6.5 with this fix pack already applied.