[21215] Fixing CVE-2010-0403

Caeies <[email protected]> Wed, 02 Jun 2010 09:15:49 +0000
Newsgroups gmane.comp.web.phpgroupware.cvs
Message-ID <[email protected]>
Revision: 21215
          http://svn.sv.gnu.org/viewvc/?view=rev&root=phpgroupware&revision=21215
Author:   Caeies
Date:     2010-06-02 09:15:48 +0000 (Wed, 02 Jun 2010)
Log Message:
-----------
Fixing CVE-2010-0403

Modified Paths:
--------------
    core/branches/branch_0_9_16/about.php

Modified: core/branches/branch_0_9_16/about.php
===================================================================
--- core/branches/branch_0_9_16/about.php	2010-05-05 14:05:10 UTC (rev 21214)
+++ core/branches/branch_0_9_16/about.php	2010-06-02 09:15:48 UTC (rev 21215)
@@ -16,7 +16,7 @@
 	include('header.inc.php');
 
 	$app = $_GET['app'];
-	if ($app)
+	if ($app && isset($GLOBALS['phpgw_info']['apps'][$app]))
 	{
 		if (!($included = $GLOBALS['phpgw']->hooks->single('about',$app)))
 		{