Security fix: unauthorized access (#10091)

Browse Source

* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)

Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input

* git mv html/includes/ includes/html
git mv html/pages/ includes/html/

...

This commit is contained in:

Tony Murray

2019-04-11 23:26:42 -05:00

committed by GitHub

parent b81af32ed2

commit 36431dd296

1301 changed files with 1443 additions and 1439 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1674

includes/html/functions.inc.php Normal file

File diff suppressed because it is too large Load Diff