[Phpgroupware-cvs] CVS: phpgwapi/setup tables_update.inc.php, 1.53.2.12, 1.53.2.13

[Ralf Becker <address@hidden>]

Update of /cvsroot/phpgroupware/phpgwapi/setup
In directory subversions:/tmp/cvs-serv23236

Modified Files:
      Tag: Version-0_9_14-branch
        tables_update.inc.php 
Log Message:
removed $appdir in include to close security hole (setting this var in the url 
and register_globals on)

Index: tables_update.inc.php
===================================================================
RCS file: /cvsroot/phpgroupware/phpgwapi/setup/tables_update.inc.php,v
retrieving revision 1.53.2.12
retrieving revision 1.53.2.13
diff -C2 -r1.53.2.12 -r1.53.2.13
*** tables_update.inc.php       6 Jul 2003 20:27:16 -0000       1.53.2.12
--- tables_update.inc.php       21 Jul 2003 15:44:19 -0000      1.53.2.13
***************
*** 14,20 ****
  
        /* Include older phpGroupWare update support */
!       include($appdir . 'tables_update_0_9_9.inc.php');
!       include($appdir . 'tables_update_0_9_10.inc.php');
!       include($appdir . 'tables_update_0_9_12.inc.php');
  
        /* This is since the last release */
--- 14,20 ----
  
        /* Include older phpGroupWare update support */
!       include('tables_update_0_9_9.inc.php');
!       include('tables_update_0_9_10.inc.php');
!       include('tables_update_0_9_12.inc.php');
  
        /* This is since the last release */