Joomlaboard 1.1.x RFI

[brian]

Potential Remote File Inclusion in
files : /image_upload.php , /file_upload.php

Reported at http://www.milw0rm.com/exploits/3560

[Joomaboom]

Is this a really old hack? 

According to the Millworm site this is the fix
*** How To Fix It : U can put this code -
defined( '_VALID_MOS' ) or die( 'Catch Me iF u Can ### Patched By Cold z3ro .' ); - after <?php code start

But my 1.1.4 files for file_upload.php and image_upload.php already has that code in them.
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );