ispman/ispman-web/htdocs/admin index.cgi,1.18,1.19
Joerg Delker <[email protected]>
| Newsgroups | gmane.comp.isp.ispman.cvs |
|---|---|
| Message-ID | <[email protected]> |
Update of /cvsroot/ispman/ispman/ispman-web/htdocs/admin
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv32532/ispman-web/htdocs/admin
Modified Files:
index.cgi
Log Message:
missed a $session->save_param in the first fix
this fixes (hopefully finaly) [ 940878 ] cleartext passwords saved in world readable files in /tmp
Index: index.cgi
===================================================================
RCS file: /cvsroot/ispman/ispman/ispman-web/htdocs/admin/index.cgi,v
retrieving revision 1.18
retrieving revision 1.19
diff -u -d -r1.18 -r1.19
--- index.cgi 5 Jun 2004 12:45:22 -0000 1.18
+++ index.cgi 8 Jun 2004 19:22:53 -0000 1.19
@@ -120,7 +120,8 @@
my ( $var, $val ) = split( /\s*=\s*/, $_ );
$session->param( $var, $val );
}
- $session->save_param($r);
+ # disabled due to bug [940878]
+ #$session->save_param($r);
print $r->redirect(
-url => $ENV{'SCRIPT_NAME'},
-cookie => $cookie
@@ -167,7 +168,8 @@
if ( $r->param("language") ) {
$session->param( "language", $r->param("language") );
- # $session->save_param($r);
+ # disabled due to bug [940878]
+ #$session->save_param($r);
}
print $r->header( -charset => "UTF-8" );
-------------------------------------------------------
This SF.Net email is sponsored by: GNOME Foundation
Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event.
GNOME Users and Developers European Conference, 28-30th June in Norway
http://2004/guadec.org