security report

Total impact: 5
Affected tags: dt, id, lfi

Variable: POST.relocate | Value: http://www.tomakali.net/m/chat/home/
Impact: 5 | Tags: dt, id, lfi
Description: Detects specific directory and path traversal | Tags: dt, id, lfi | ID: 11

REMOTE_ADDR: 122.164.246.129
HTTP_X_FORWARDED_FOR:
HTTP_CLIENT_IP:
SCRIPT_FILENAME: /home/tomnet/public_html/

Why are you even wasting your time with phpids by having it enabled?  You know as well as the rest of us, that it has never worked.  Boonex should just remove the P.O.S. from Dolphin.  I don't think PHPIDS was developed with Dolphin in mind.  I'm really surprised that it's still a part of Dolphin.  It makes no sense to keep it.

Total impact: 5
Affected tags: dt, id, lfi

Variable: POST.promo_relocation_link_

I agree with houstonlively. You should also be aware that it was disabled in a previous release because it was acknowledged that it doesn't work, and was prone to report false positives. It wasn't implemented properly and because of that, it doesn't work.

If you can't save them.

Then force it. Edit in the database. The values are is sys_options.

After database edit, clear cache.