Topic: small security problem in anycontent.php (Read 5550 times)

Andi · « **on:** December 12, 2004, 07:18:45 pm »

Hi

if you open the file anycontent.php directly, the following message appears:

Quote

Fatal error: Call to undefined function starttable() in xxx\anycontent.php on line 32

Version:
anycontent.php,v 1.10 2004/09/25 19:09:40 caspershadow

Casper · « **Reply #1 on:** December 12, 2004, 08:15:33 pm »

Yes, but anycontent.php is not designed to be called directly. It works fine when used as designed.

How is this a security problem?

Andi · « **Reply #2 on:** December 12, 2004, 08:19:15 pm »

Quote

How is this a security problem?

Hi

so called "full path disclosure"

kegobeer · « **Reply #3 on:** December 12, 2004, 08:40:22 pm »

Fixed easily enough with

if (!defined('IN_COPPERMINE')) die('Not in Coppermine...');

Joachim Müller · « **Reply #4 on:** December 14, 2004, 07:48:41 am »

committed to devel branch.

Joachim