+--------------------------------------------------------------------------------+
| MyBB 1.4.3 - Security Update Patch File                                        |
| (c) 2008 MyBB Group.                                                           |
|                                                                                |
| This patch file fixes a low risk issues in MyBB 1.4.3                          |
|                                                                                |
| Please follow the instructions documented to manually patch your board.        |
+--------------------------------------------------------------------------------+

===============
1. moderation.php
===============

Find:
--
// Begin!
switch($mybb->input['action'])
{
--

ADD BEFORE:
--
if($mybb->request_method != "post" && $mybb->input['action'] != "getip")
{
	error_no_permission();
}
--

===============
2. (If you are not planning to run the upgrade procedure:) For each of your template sets under the "showthread_moderationoptions" template
===============

Find:
--
		<form action="moderation.php" method="get" style="margin-top: 0; margin-bottom: 0;">
--

Replace with:
--
		<form action="moderation.php" method="post" style="margin-top: 0; margin-bottom: 0;" id="moderator_options">
--
Also Find:
--
		<select name="action" onchange="window.location=('moderation.php?action='+this.options[this.selectedIndex].value+'&amp;tid={$tid}&amp;modtype=thread&amp;my_post_key={$mybb->post_code}')">
--

Replace with:
--
		<select name="action" onchange="$('moderator_options').submit();">
--

===============
3. inc/class_core.php (Version number change)
===============

Find:
--
/**
 * The friendly version number of MyBB we're running.
 *
 * @var string
 */
var $version = "1.4.3";

/**
 * The version code of MyBB we're running.
 *
 * @var integer
 */
var $version_code = 1403;
--

Replace with:
--
/**
 * The friendly version number of MyBB we're running.
 *
 * @var string
 */
var $version = "1.4.4";

/**
 * The version code of MyBB we're running.
 *
 * @var integer
 */
var $version_code = 1404;
--

ALL DONE