[VIM] false: 123 Flash Chat RFI

[Steven M. Christey]

Researcher: F10

Ref: BUGTRAQ:20080228 123 Flash Chat Module for phpBB
     URL:http://www.securityfocus.com/archive/1/archive/1/488914/100/0/threaded


123flashchat.php contains:

  $phpbb_root_path = './';
  include($phpbb_root_path . 'extension.inc');
  include($phpbb_root_path . 'common.'.$phpEx);

phpbb_login_chat.php contains:

  $phpbb_root_path = './';
  include($phpbb_root_path . 'extension.inc');
  include($phpbb_root_path . 'common.'.$phpEx);


extension.inc and common.php are not part of the 123 Flash
distribution itself; rather, they're part of phpBB's sessions
integration as described at
http://www.phpbb.com/kb/article/phpbb2-sessions-integration/


- Steve