[Phpwebsite-security] Re: Security vuln

[Matthew M. <ma...@tu...>]

No it should not. That was some testing on my part.

Remove that line or download the file again. Kevin fixed it while I was
out :)

Thanks Shaun,

Matt


On Wed, 2006-04-19 at 14:31 +0100, Shaun Murray wrote:
> Should it have a path in there...
> 
>  From the source...
> 
> /* Check to make sure $hub_dir is not set to an address */
> $hub_dir = '/var/www/html/hubs/student_development/';
> if (!preg_match ("/:\/\//i", $hub_dir)) {
>      loadConfig($hub_dir);
> } else {
>      exit('FATAL ERROR! Hub directory was malformed.');
> }
> 
> 
> 
> On 19 Apr 2006, at 13:56, Matthew McNaney wrote:
> 
> > Shaun,
> >
> > I just tested the index.php file and it was flawed. A new one has been
> > submitted. I have also posted to the security and developer list as  
> > well
> > as the home page.
> >
> > Matt
> >
> > On Tue, 2006-04-18 at 12:51 +0100, Shaun Murray wrote:
> >> Translated from Russian...
> >>
> >> http://www.worldlingo.com/wl/translate?wl_lp=RU-
> >> EN&wl_fl=2&wl_rurl=http%3A%2F%2Fhttp%3A%2F%2Fwww.securitylab.ru%
> >> 2Fvulnerability%2F265748.php%2F&wl_url=http%3A%2F% 
> >> 2Fwww.securitylab.ru
> >> %2Fvulnerability%2F265748.php&wlg_table=-3
> >>
> >>
> >> Is this fixed already in index.php in cvs?
> >>
> >> Shaun
> >> aegis design - http://www.aegisdesign.co.uk
> >> aegis hosting - http://www.aegishosting.co.uk
> > -- 
> > Matthew McNaney
> > Electronic Student Services
> > Appalachian State University
> > http://phpwebsite.appstate.edu
> >
> 
> Shaun
> aegis design - http://www.aegisdesign.co.uk
> aegis hosting - http://www.aegishosting.co.uk
-- 
Matthew McNaney
Electronic Student Services
Appalachian State University
http://phpwebsite.appstate.edu