#264 \legacyRender\admin\menu.php with 3 undefined constants

2.1.8
open-accepted
minahito
5
2010-05-09
2010-04-28
Mikhail Miguel
No

1) \html\modules\legacyRender\admin\menu.php with 3 undefined constants: _MI_LEGACYRENDER_ADMENU_TEMPLATE_MANAGE, _MI_LEGACYRENDER_ADMENU_TPLFILE_MANAGE , and _MI_LEGACYRENDER_ADMENU_BANNER_MANAGE
2) related error message with full path disclosure vulnerability when accessing directly the file.

---

<br />
<b>Notice</b>: Use of undefined constant _MI_LEGACYRENDER_ADMENU_TEMPLATE_MANAGE - assumed '_MI_LEGACYRENDER_ADMENU_TEMPLATE_MANAGE' in <b>\XXX\YYY\html\modules\legacyRender\admin\menu.php</b> on line <b>3</b><br />
<br />
<b>Notice</b>: Use of undefined constant _MI_LEGACYRENDER_ADMENU_TPLFILE_MANAGE - assumed '_MI_LEGACYRENDER_ADMENU_TPLFILE_MANAGE' in <b>\XXX\YYY\html\modules\legacyRender\admin\menu.php</b> on line <b>7</b><br />
<br />
<b>Notice</b>: Use of undefined constant _MI_LEGACYRENDER_ADMENU_BANNER_MANAGE - assumed '_MI_LEGACYRENDER_ADMENU_BANNER_MANAGE' in <b>\XXX\YYY\html\modules\legacyRender\admin\menu.php</b> on line <b>11</b><br />

Discussion

  • minahito
    minahito
    2010-05-09

    We need to add guard code.

     
  • minahito
    minahito
    2010-05-09

    • milestone: 903888 --> 2.1.8
    • assigned_to: nobody --> minahito
    • status: open --> open-accepted
     
  • gigamaster
    gigamaster
    2012-07-24

    I've confirmed the fix. Closed.