skinuo sam php skriptu (sajt) sa jednog foruma, tamo su mi rekli da posle skidanja uradim ovo:

"The authentication check of this script doesn't work properly:

//checkeamos que el usuario este logueado y que tenga los permisos de admin
if(!check_user()){ header("Location: ./../login.php"); }
if($user['authlevel']!="3"&&$user['authlevel']!="1"){ header("Location: ../login.php");}


the use of the header function do not stop the execution of the code, so an attacker may build a special script to send command to the site without even have a registered account.
I think that even the official site might be vulnerable, even if it is working with the 0.6 version of the script.
I'll try to contact the authors to get the last version of the script and check.
If so, you'll find it nearly on this pages.


Solution: The only way to solve this problem is changing the previously lines in all admin files with this lines:

//checkeamos que el usuario este logueado y que tenga los permisos de admin
if(!check_user()){ header("Location: ./../login.php"); exit;}
if($user['authlevel']!="3"&&$user['authlevel']!="1"){ header("Location: ../login.php");exit;}"

jer mi moze to neko prevoditi na "srpski" ?

Ja mislim da sam za recenicu "jel moze neko da mi prevede na srpski" vec rekao sta treba u uvodu ovog foruma...
Sto se tice samog koda, prosto jedan cove zameni drugim i radice.

ok, resio sam. samo je bio problem da nisam znao gde da zamenim kod  ali resio sam, hvala