Attack of custom profile fields!

This is horrible

It is impossible to make any customized profile fields because boonex thinks its an attack if the users actually try to change them.  Boonex these possible attacks are greater than high priority.  Get your security right and stop this nonsense.  We want users to be able to customize thier profile without admins getting the below email or worse.

I make the customized profile fields and test it with the test profile.  I get the following email.  However, when I change the custom profile field with the admin, boonex will accept the change and update the profile accordingly.  Fix this now.

Total impact: 12
Affected tags: sqli, id, lfi

Variable: REQUEST.sensored.0 | Value: 2\"
Impact: 6 | Tags: sqli, id, lfi
Description: Detects classic SQL injection probings 1/2 | Tags: sqli, id, lfi | ID: 42

Variable: POST.sensored.0 | Value: 2\"
Impact: 6 | Tags: sqli, id, lfi
Description: Detects classic SQL injection probings 1/2 | Tags: sqli, id, lfi | ID: 42

Ticket added (generic): http://www.boonex.com/trac/dolphin/ticket/1467

This problem has been fixed in 13237 and 13238 revision

Did the changeset and still get this error when using custom profile fields.  I cleaned the cache and my browser cache to make sure.

Total impact: 12
Affected tags: sqli, id, lfi

Variable: REQUEST.sensored.0 | Value: 2\"
Impact: 6 | Tags: sqli, id, lfi
Description: Detects classic SQL injection probings 1/2 | Tags: sqli, id, lfi | ID: 42

Variable: POST.sensored.0 | Value: 2\"
Impact: 6 | Tags: sqli, id, lfi
Description: Detects classic SQL injection probings 1/2 | Tags: sqli, id, lfi | ID: 42

The same prob here , cleaned all the cach and db and js and clear my browser , i even thinked to restore my computer ( lol joke ) yea guys nothing changed , the possible attack is the only thing that Annoye me and eveyone here .

Please fix it and better test it in your admin area befor we test it lol

Peace and bread .

bumps

For some reason, that email content brought me to tears.. rofl

shh.... can't tell you what project I"m on but fixed it.

Pretty sneaky edit.