phpgroupware-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-cvs] phpsysinfo/includes system_header.php, 1.1.1.1.4.2 sy


From: skwashd
Subject: [Phpgroupware-cvs] phpsysinfo/includes system_header.php, 1.1.1.1.4.2 system_footer.php, 1.1.1.1.4.2
Date: Fri, 18 Nov 2005 14:23:00 +0100

Update of phpsysinfo/includes

Modified Files:
     Branch: Version-0_9_16-branch
            system_header.php lines: +5 -1
            system_footer.php lines: +5 -1

Log Message:
security fixes for CVE-2005-0870, CVE-2005-3347 & CVE-2005-3348 (from Martin 
Schulze of the Debian security team) and a fix for cookie based phpgw detection 
when register_globals = off and some other little tweaks to the patch

====================================================
Index: phpsysinfo/includes/system_header.php
diff -u phpsysinfo/includes/system_header.php:1.1.1.1.4.1 
phpsysinfo/includes/system_header.php:1.1.1.1.4.2
--- phpsysinfo/includes/system_header.php:1.1.1.1.4.1   Sat Nov  1 22:08:27 2003
+++ phpsysinfo/includes/system_header.php       Fri Nov 18 13:23:04 2005
@@ -19,6 +19,10 @@
 //
 // $Id$

+if (eregi('system_header.php', $_SERVER['PHP_SELF'])) {
+    exit;
+}
+
 header("Cache-Control: no-cache, must-revalidate");
 if (!isset($charset)) { $charset='iso-8859-1'; }
 header('Content-Type: text/html; charset=' . $charset);

====================================================
Index: phpsysinfo/includes/system_footer.php
diff -u phpsysinfo/includes/system_footer.php:1.1.1.1.4.1 
phpsysinfo/includes/system_footer.php:1.1.1.1.4.2
--- phpsysinfo/includes/system_footer.php:1.1.1.1.4.1   Sat Nov  1 22:08:27 2003
+++ phpsysinfo/includes/system_footer.php       Fri Nov 18 13:23:04 2005
@@ -19,6 +19,10 @@
 //
 // $Id$

+if (eregi('system_footer.php', $_SERVER['PHP_SELF'])) {
+    exit;
+}
+
 echo "<center>";

 $update_form = "<form method=\"POST\" action=\"$PHP_SELF\">\n"






reply via email to

[Prev in Thread] Current Thread [Next in Thread]