[geeklog-cvs] Geeklog-1.x/public_html lib-common.php, 1.727, 1.728 siteconfig.php.dist, 1.19, 1.20

Dirk Haun dhaun at qs1489.pair.com
Sun Sep 21 04:37:11 EDT 2008


Update of /cvsroot/geeklog/Geeklog-1.x/public_html
In directory qs1489.pair.com:/tmp/cvs-serv33344/public_html

Modified Files:
	lib-common.php siteconfig.php.dist 
Log Message:
Fixed protection against direct execution on non-case sensitive file systems


Index: siteconfig.php.dist
===================================================================
RCS file: /cvsroot/geeklog/Geeklog-1.x/public_html/siteconfig.php.dist,v
retrieving revision 1.19
retrieving revision 1.20
diff -C2 -d -r1.19 -r1.20
*** siteconfig.php.dist	7 Sep 2008 07:42:36 -0000	1.19
--- siteconfig.php.dist	21 Sep 2008 08:37:09 -0000	1.20
***************
*** 9,13 ****
   */
  
! if (strpos($_SERVER['PHP_SELF'], 'siteconfig.php') !== false) {
      die('This file can not be used on its own!');
  }
--- 9,13 ----
   */
  
! if (strpos(strtolower($_SERVER['PHP_SELF']), 'siteconfig.php') !== false) {
      die('This file can not be used on its own!');
  }

Index: lib-common.php
===================================================================
RCS file: /cvsroot/geeklog/Geeklog-1.x/public_html/lib-common.php,v
retrieving revision 1.727
retrieving revision 1.728
diff -C2 -d -r1.727 -r1.728
*** lib-common.php	2 Sep 2008 19:08:56 -0000	1.727
--- lib-common.php	21 Sep 2008 08:37:09 -0000	1.728
***************
*** 120,126 ****
  
  // this file can't be used on its own - redirect to index.php
! if( strpos( $_SERVER['PHP_SELF'], 'lib-common.php' ) !== false )
! {
!     echo COM_refresh( $_CONF['site_url'] . '/index.php' );
      exit;
  }
--- 120,125 ----
  
  // this file can't be used on its own - redirect to index.php
! if (strpos(strtolower($_SERVER['PHP_SELF']), 'lib-common.php') !== false) {
!     echo COM_refresh($_CONF['site_url'] . '/index.php');
      exit;
  }




More information about the geeklog-cvs mailing list