freebsd-ports/www/phpbb/files/patch-admin::admin_styles.php
Norikatsu Shigemura 4020c357c0 o Fix two vulnerabilities.
http://www.phpbb.com/news.php?id=17

	* phpBB SQL Injection vulnerability
	http://www.phpbb.com/phpBB/viewtopic.php?t=112052

	* PHPBB Admin_Styles.PHP Theme_Info.CFG File Include Vulnerability
	http://www.securityfocus.com/bid/7932/credit/
	http://www.phpbb.com/phpBB/viewtopic.php?t=113826

o Bump PORTREVISION.
o Take MAINTAINERship to ports@.

PR:		ports/54165[1]
Submitted by:	Kang Liu <lazykang@hotmail.com> [1]
		Ivanchenko V. I. <webmaster@asiamusic.ru>
2003-07-07 08:04:49 +00:00

24 lines
721 B
PHP

--- admin/admin_styles.php.orig Sun Dec 22 04:09:58 2002
+++ admin/admin_styles.php Mon Jul 7 12:59:05 2003
@@ -39,16 +39,14 @@
// Check if the user has cancled a confirmation message.
//
$phpbb_root_path = "./../";
+require($phpbb_root_path . 'extension.inc');
$confirm = ( isset($HTTP_POST_VARS['confirm']) ) ? TRUE : FALSE;
$cancel = ( isset($HTTP_POST_VARS['cancel']) ) ? TRUE : FALSE;
-if (empty($HTTP_POST_VARS['send_file']))
-{
- $no_page_header = ( $cancel ) ? TRUE : FALSE;
- require($phpbb_root_path . 'extension.inc');
- require('./pagestart.' . $phpEx);
-}
+$no_page_header = (!empty($HTTP_POST_VARS['send_file']) || $cancel) ? TRUE : FALSE;
+
+require('./pagestart.' . $phpEx);
if ($cancel)
{