Again, an upgrade to Joomla - and again the change to sef.php reported previously. These security holes in Joomla start being costly for anyone that has done even minimal customization, and it start becoming relevant to actually change the behavior of Joomla to not require that kind of customization.