[geeklog-cvs] Geeklog-1.x/plugins/staticpages functions.inc, 1.126, 1.127 install_defaults.php, 1.8, 1.9

Dirk Haun dhaun at qs1489.pair.com
Sun Sep 21 04:37:11 EDT 2008


Update of /cvsroot/geeklog/Geeklog-1.x/plugins/staticpages
In directory qs1489.pair.com:/tmp/cvs-serv33344/plugins/staticpages

Modified Files:
	functions.inc install_defaults.php 
Log Message:
Fixed protection against direct execution on non-case sensitive file systems


Index: functions.inc
===================================================================
RCS file: /cvsroot/geeklog/Geeklog-1.x/plugins/staticpages/functions.inc,v
retrieving revision 1.126
retrieving revision 1.127
diff -C2 -d -r1.126 -r1.127
*** functions.inc	28 Aug 2008 09:50:13 -0000	1.126
--- functions.inc	21 Sep 2008 08:37:08 -0000	1.127
***************
*** 37,41 ****
  // $Id$
  
! if (strpos($_SERVER['PHP_SELF'], 'functions.inc') !== false) {
      die('This file can not be used on its own.');
  }
--- 37,41 ----
  // $Id$
  
! if (strpos(strtolower($_SERVER['PHP_SELF']), 'functions.inc') !== false) {
      die('This file can not be used on its own.');
  }

Index: install_defaults.php
===================================================================
RCS file: /cvsroot/geeklog/Geeklog-1.x/plugins/staticpages/install_defaults.php,v
retrieving revision 1.8
retrieving revision 1.9
diff -C2 -d -r1.8 -r1.9
*** install_defaults.php	3 Jul 2008 18:00:53 -0000	1.8
--- install_defaults.php	21 Sep 2008 08:37:08 -0000	1.9
***************
*** 35,39 ****
  // $Id$
  
! if (strpos($_SERVER['PHP_SELF'], 'install_defaults.php') !== false) {
      die('This file can not be used on its own!');
  }
--- 35,39 ----
  // $Id$
  
! if (strpos(strtolower($_SERVER['PHP_SELF']), 'install_defaults.php') !== false) {
      die('This file can not be used on its own!');
  }




More information about the geeklog-cvs mailing list