lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sec: Remove security hole

Browse Source
This commit is contained in:
Laurent Destailleur 2008-05-02 21:22:37 +00:00
parent ecd5f8cede
commit 8ae77a8d49
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
htdocs/includes/fckeditor/editor/filemanager/connectors/php/config.php
View File

@ -24,8 +24,11 @@
global $Config ; global $Config ;
//require_once("../../../../../../master.inc.php"); // We must include the main because this page is
require_once("../../../../../../conf/conf.php"); // ajouté car include master.inc.php ne marche pas // a web page that require security controls and
// is a security hole if anybody can access without
// being an authenticated user.
require_once("../../../../../../main.inc.php");
$uri=eregi_replace('^http(s?)://','',$dolibarr_main_url_root); $uri=eregi_replace('^http(s?)://','',$dolibarr_main_url_root);
$pos = strstr ($uri, '/'); // $pos contient alors url sans nom domaine $pos = strstr ($uri, '/'); // $pos contient alors url sans nom domaine
if ($pos == '/') $pos = ''; // si $pos vaut /, on le met a '' if ($pos == '/') $pos = ''; // si $pos vaut /, on le met a ''