[packages/dokuwiki.git] / fixprivilegeescalationbug.diff

#! /bin/sh /usr/share/dpatch/dpatch-run
## fixprivilegeescalationbug.dpatch by Matti Pöllä <mpo@iki.fi>
##
## DP: Hotfix for privilege escalation bug.

@DPATCH@
--- dokuwiki-rc2010-10-07/inc/actions.php~	2010-10-07 21:38:37.000000000 +0300
+++ dokuwiki-rc2010-10-07/inc/actions.php	2010-10-07 21:40:42.379139693 +0300
@@ -149,6 +149,7 @@
     global $conf;
     global $license;
 
+    $ACT = act_permcheck($ACT);
     //call template FIXME: all needed vars available?
     $headers[] = 'Content-Type: text/html; charset=utf-8';
     trigger_event('ACTION_HEADERS_SEND',$headers,'act_sendheaders');
Commit	Line	Data
a3e2b241 ER	1	#! /bin/sh /usr/share/dpatch/dpatch-run
	2	## fixprivilegeescalationbug.dpatch by Matti Pöllä <mpo@iki.fi>
	3	##
	4	## DP: Hotfix for privilege escalation bug.
	5
	6	@DPATCH@
c4df8b0c ER	7	--- dokuwiki-rc2010-10-07/inc/actions.php~ 2010-10-07 21:38:37.000000000 +0300
	8	+++ dokuwiki-rc2010-10-07/inc/actions.php 2010-10-07 21:40:42.379139693 +0300
	9	@@ -149,6 +149,7 @@
	10	global $conf;
	11	global $license;
a3e2b241	12
c4df8b0c ER	13	+ $ACT = act_permcheck($ACT);
	14	//call template FIXME: all needed vars available?
	15	$headers[] = 'Content-Type: text/html; charset=utf-8';
	16	trigger_event('ACTION_HEADERS_SEND',$headers,'act_sendheaders');