[Phpgroupware-cvs] CVS: phpgwapi/setup tables_update.inc.php, 1.72, 1.73

[Ralf Becker <address@hidden>]

Update of /cvsroot/phpgroupware/phpgwapi/setup
In directory subversions:/tmp/cvs-serv23538

Modified Files:
        tables_update.inc.php 
Log Message:
removed $appdir in include to close security hole (setting this var in the url 
and register_globals on)

Index: tables_update.inc.php
===================================================================
RCS file: /cvsroot/phpgroupware/phpgwapi/setup/tables_update.inc.php,v
retrieving revision 1.72
retrieving revision 1.73
diff -C2 -r1.72 -r1.73
*** tables_update.inc.php       22 Jun 2003 11:23:53 -0000      1.72
--- tables_update.inc.php       21 Jul 2003 15:45:49 -0000      1.73
***************
*** 12,19 ****
        
        /* Include older phpGroupWare update support */
!       include($appdir . 'tables_update_0_9_9.inc.php');
!       include($appdir . 'tables_update_0_9_10.inc.php');
!       include($appdir . 'tables_update_0_9_12.inc.php');
!       include($appdir . 'tables_update_0_9_14.inc.php');
  
        /* This is since the last release */
--- 12,19 ----
        
        /* Include older phpGroupWare update support */
!       include('tables_update_0_9_9.inc.php');
!       include('tables_update_0_9_10.inc.php');
!       include('tables_update_0_9_12.inc.php');
!       include('tables_update_0_9_14.inc.php');
  
        /* This is since the last release */