I must agree this bug exists, however there will be still no solution for it and we will release it only when the new release of miniBB comes out next year. Basically it would be needed to fix each and every file where such integer variable setting happens, and there are a lot of these files.
In general on each "normal" hosting all PHP errors must be supressed in the configuration so most likely you won't even see such error reporting.
I have checked some major scripts like punBB or WordPress or vBulletin (and/or their add-ons) and it appears all of them can be 'vulnerable' because of this issue as well.
First I thought it is a PHP bug because it is strange that PHP which works so transparently with the operand types, and it shuts down on such simple confusion.
However to avoid confusion of the users I would mention this is not a critical bug and even knowing direct path to the scripts on the server means nothing until you have access to this path (and I suppose only folder's owner can have such access, else we could call it an insecure hosting). |