r1842 - trunk/scripts

[email protected] Tue, 10 Jun 2008 08:47:49 +0200 (CEST)

Newsgroups	gmane.editors.bitflux.cvs
Message-ID	<[email protected]>

Author: chregu
Date: Tue Jun 10 08:47:48 2008
New Revision: 1842

Log:
fix a remote security issue with this script
http://www.milw0rm.com/exploits/5767

Modified:
   trunk/scripts/loadsave.php

Modified: trunk/scripts/loadsave.php
==============================================================================
--- trunk/scripts/loadsave.php	(original)
+++ trunk/scripts/loadsave.php	Tue Jun 10 08:47:48 2008
@@ -9,6 +9,8 @@
  needs PHP 4.3 or PHP 5. similar is also possible with PHP < 4.3
 */
 
+die("remove this die() line, if you really want to use this script");
+
 header("Content-Type: text/html");
 
 $xmlfile = realpath($_GET['XML']);
-- 
Bx-editor-cvs mailing list
[email protected]
http://lists.bitflux.ch/cgi-bin/listinfo/bx-editor-cvs