HYIP Manager script - ddd backdoor

[admin]

HYIP Manager ddd backdoor (allows a sql injection)
Located in inc/security.inc

look for the line

Code:

echo ($acsent_settings[’detect_ip’] == ‘disabled’ ? ‘checked’ : ‘ddd’);

Remove only the ddd from the following line. If you delete the entire line, then your security settings will not show the disabled button highlighted. If you delete only the ddd from the line, the disabled button will be highlighted, if you disable the IP change sensitivity.

You can comment it out /* fdgsdfgsdfgdsfg */