Re: [Phpwebsite-developers] Updated patch

[Jim W. <spi...@us...>]

I hope your branches are still working (Or how about the most basic
regression 
testing before comitting to cvs and announcing fixes on the internet
;-))

An easy one to miss and glad I remembered to check this time!  The
following 
edit around line 163 or so will fix it:

Change 

  require_once './core/Debug.php';

to 
  require_once $hub_dir . '/core/Debug.php';


Otherwise patch works great.  Thanks for the quick fix on this.

Best regards,

Jim Wilson


From: Matthew McNaney
> 
> We have created an updated patch.
>
http://phpwebsite.appstate.edu/downloads/security/phpws_files_security_p
atch.tgz
> 
> It contains the search fix and a new function in the index.php that
> scrubs ANY uploaded file. This fix should work for all modules.
> 
> The calendar and announcement patch file are still on the site.
> 
> Thank you for your patience with this issue.
> 
> -- 
> Matthew McNaney
> Electronic Student Services
> Appalachian State University
> http://phpwebsite.appstate.edu