[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Phpgroupware-cvs] phpsysinfo/includes system_header.php, 1.1.1.1.4.2 sy
From: |
skwashd |
Subject: |
[Phpgroupware-cvs] phpsysinfo/includes system_header.php, 1.1.1.1.4.2 system_footer.php, 1.1.1.1.4.2 |
Date: |
Fri, 18 Nov 2005 14:23:00 +0100 |
Update of phpsysinfo/includes
Modified Files:
Branch: Version-0_9_16-branch
system_header.php lines: +5 -1
system_footer.php lines: +5 -1
Log Message:
security fixes for CVE-2005-0870, CVE-2005-3347 & CVE-2005-3348 (from Martin
Schulze of the Debian security team) and a fix for cookie based phpgw detection
when register_globals = off and some other little tweaks to the patch
====================================================
Index: phpsysinfo/includes/system_header.php
diff -u phpsysinfo/includes/system_header.php:1.1.1.1.4.1
phpsysinfo/includes/system_header.php:1.1.1.1.4.2
--- phpsysinfo/includes/system_header.php:1.1.1.1.4.1 Sat Nov 1 22:08:27 2003
+++ phpsysinfo/includes/system_header.php Fri Nov 18 13:23:04 2005
@@ -19,6 +19,10 @@
//
// $Id$
+if (eregi('system_header.php', $_SERVER['PHP_SELF'])) {
+ exit;
+}
+
header("Cache-Control: no-cache, must-revalidate");
if (!isset($charset)) { $charset='iso-8859-1'; }
header('Content-Type: text/html; charset=' . $charset);
====================================================
Index: phpsysinfo/includes/system_footer.php
diff -u phpsysinfo/includes/system_footer.php:1.1.1.1.4.1
phpsysinfo/includes/system_footer.php:1.1.1.1.4.2
--- phpsysinfo/includes/system_footer.php:1.1.1.1.4.1 Sat Nov 1 22:08:27 2003
+++ phpsysinfo/includes/system_footer.php Fri Nov 18 13:23:04 2005
@@ -19,6 +19,10 @@
//
// $Id$
+if (eregi('system_footer.php', $_SERVER['PHP_SELF'])) {
+ exit;
+}
+
echo "<center>";
$update_form = "<form method=\"POST\" action=\"$PHP_SELF\">\n"
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [Phpgroupware-cvs] phpsysinfo/includes system_header.php, 1.1.1.1.4.2 system_footer.php, 1.1.1.1.4.2,
skwashd <=