Index: trunk/admin/install/upgrades/changelog_1_0_6.txt =================================================================== diff -u --- trunk/admin/install/upgrades/changelog_1_0_6.txt (revision 0) +++ trunk/admin/install/upgrades/changelog_1_0_6.txt (revision 256) @@ -0,0 +1,7 @@ +File in-portal/globals.php changed +File in-portal/admin/install/install_lib.php changed + + +Changes in phrases and events: + + Index: trunk/admin/install/install_lib.php =================================================================== diff -u -r185 -r256 --- trunk/admin/install/install_lib.php (.../install_lib.php) (revision 185) +++ trunk/admin/install/install_lib.php (.../install_lib.php) (revision 256) @@ -73,6 +73,7 @@ //if( file_exists($ini_file) ) //{ $fp = fopen($ini_file, "w"); + fwrite($fp,'<'.'?'.'php die() ?'.">\n\n"); foreach($ini_vars as $secname => $section) { fwrite($fp,"[".$secname."]\n"); @@ -452,7 +453,13 @@ $retval = array(); $section = ''; + $ln = 1; + $resave = false; foreach($contents as $line) { + if ($ln == 1 && $line != '<'.'?'.'php die() ?'.">\n") { + $resave = true; + } + $ln++; $line = trim($line); $line = eregi_replace(';[.]*','',$line); if(strlen($line) > 0) { @@ -477,7 +484,14 @@ //echo '
'; } //end if } //end foreach - + if ($resave) { + $fp = fopen($file, "w"); + reset($contents); + fwrite($fp,'<'.'?'.'php die() ?'.">\n\n"); + foreach($contents as $line) fwrite($fp,"$line"); + fclose($fp); + } + return $retval; } Index: trunk/globals.php =================================================================== diff -u -r212 -r256 --- trunk/globals.php (.../globals.php) (revision 212) +++ trunk/globals.php (.../globals.php) (revision 256) @@ -42,7 +42,13 @@ $retval = array(); $section = ''; + $ln = 1; + $resave = false; foreach($contents as $line) { + if ($ln == 1 && $line != '<'.'?'.'php die() ?'.">\n") { + $resave = true; + } + $ln++; $line = trim($line); $line = eregi_replace(';[.]*','',$line); if(strlen($line) > 0) { @@ -67,7 +73,14 @@ //echo '
'; } //end if } //end foreach - + if ($resave) { + $fp = fopen($file, "w"); + reset($contents); + fwrite($fp,'<'.'?'.'php die() ?'.">\n\n"); + foreach($contents as $line) fwrite($fp,"$line"); + fclose($fp); + } + return $retval; } Index: trunk/admin/install/upgrades/readme_1_0_6.txt =================================================================== diff -u --- trunk/admin/install/upgrades/readme_1_0_6.txt (revision 0) +++ trunk/admin/install/upgrades/readme_1_0_6.txt (revision 256) @@ -0,0 +1,3 @@ +This version contains a critical security patch. + +An important vulnerability was discovered in In-portal that could allow an attacker to gain sensitive database and licensing information. The vulnerability affects In-portal Platform versions 1.0.4, 1.0.5 and any modules running on it. Please update your version to 1.0.6 as soon as possible, or contact support if you are unable to do so.