With the cooperation of Scott Klarr (
http://diffusionstudios.com/) we are pleased to release this security update:
This will prevent people from uploading free credits into your popups ads.
Go to your wizards/popups.php file, line 35 to 39 and add what is in bold:
else if($adoption1 == "exsistpopup") {
$exsistpopup = mysql_real_escape_string($_POST['exsistpopup']); $sql=$Db1->query("SELECT * FROM popups WHERE id='$exsistpopup'");
$pad=$Db1->fetch_array($sql);
}