TZUTC: -0700   
   MSGID: 52578.syncprog@1:103/705 2d1d9b6b   
   PID: Synchronet 3.21a-Linux master/27cbebcb9 Aug 10 2025 GCC 12.2.0   
   TID: SBBSecho 3.29-Linux master/30c5ca214 Aug 31 2025 GCC 12.2.0   
   BBSID: VERT   
   CHRS: ASCII 1   
   FORMAT: flowed   
   https://gitlab.synchro.net/main/sbbs/-/commit/25cc55869dba898628ffc538   
   Modified Files:   
   	web/lib/forum.ssjs web/root/msgs/attachments.ssjs inline.ssjs msgframe.ssjs   
   web/root/sajax-forum/body.xjs   
   Log Message:   
   Sanity check message base codes before calling MsgBase constructor   
      
   This prevents odd-ball message base files (i.e. 0-length *.shd, *.sid, files)   
   from being created in the 'ctrl' directory from malformed or malcious HTTP[S]   
   requests, as reported by Deuce.   
      
   I don't know the exact HTTP requests that triggered these errant message base   
   creations, but this should help prevent it from happening again. Though,   
   really, this code isn't really supported by anyone any longer (use ecWeb   
   instead).   
   --- SBBSecho 3.29-Linux   
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)   
   SEEN-BY: 10/0 1 102/401 103/1 705 105/81 106/201 124/5016 128/187   
   SEEN-BY: 129/14 153/7715 154/110 214/22 218/0 1 215 610 700 810 226/30   
   SEEN-BY: 227/114 229/110 206 317 400 426 428 470 700 705 266/512 280/464   
   SEEN-BY: 291/111 301/1 320/219 322/757 342/200 396/45 460/58 633/280   
   SEEN-BY: 712/848 902/26 5075/35   
   PATH: 103/705 218/700 229/426