[beatniak]

I've found a bug that makes all pligg versions vulnerable for deformation hacks and site hijacking when the extra fields are enabled.
In other words, all pligg sites that have extra fields enabled are wide open for hack attacks.

IMPORTANT: PLEASE UPGRADE IMMEDIATELY!!!

Here are the bugfix packages for Pligg 9.6 / 9.5 / 9.1 / 9.0 / 8.2
Upgrade info: Just overwrite your pligg install with the included files

I added the fix for all the official templates, but for fixing your own template:
1) Look in: /templates/<yget or MB>/submit_step_3.tpl
2) copy the code between "Steef 2k7-07 security fix start" and "Steef 2k7-07 security fix end"
3) paste in: /templates/<your template>/submit_step_3.tpl

Fix is already added to the SVN, so 9.7 will be save.