cvs: phpweb /include prepend.inc
| From: | Gabor Hojtsy | Date: | Tue, 26 Nov 2002 20:41:26 +0000 |
| Subject: | cvs: phpweb /include prepend.inc | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-13897@lists.php.net to get a copy of this message | ||
goba Tue Nov 26 15:41:26 2002 EDT
Modified files:
/phpweb/include prepend.inc
Log:
Fixing XSS bug reported by Stefan Esser (and Derick)
Index: phpweb/include/prepend.inc
diff -u phpweb/include/prepend.inc:1.7 phpweb/include/prepend.inc:1.8
--- phpweb/include/prepend.inc:1.7 Mon Aug 12 22:14:44 2002
+++ phpweb/include/prepend.inc Tue Nov 26 15:41:26 2002
@@ -1,6 +1,10 @@
<?php // -*- C++ -*-
+// Prevent cross site scripting problems
unset($RSIDEBAR_DATA);
+unset($SIDEBAR_DATA);
+
+// Load in requires parts
require_once 'site.inc';
require_once 'layout.inc';
require_once 'geoip.inc';