File: 014CVE-2008-6762.dpatch

package info (click to toggle)
wordpress 2.0.10-1etch6
  • links: PTS
  • area: main
  • in suites: etch
  • size: 3,040 kB
  • ctags: 7,377
  • sloc: php: 26,382; sh: 4,645; makefile: 23
file content (18 lines) | stat: -rw-r--r-- 812 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#! /bin/sh /usr/share/dpatch/dpatch-run
## 014CVE-2008-6762.dpatch by Giuseppe Iuculano <giuseppe@iuculano.it>
##
## All lines beginning with `## DP:' are a description of the patch.
## DP: Fixed CVE-2008-6762: Force redirect after an upgrade (Closes: #531736)

@DPATCH@
diff -urNad wordpress~/wp-admin/upgrade.php wordpress/wp-admin/upgrade.php
--- wordpress~/wp-admin/upgrade.php	2009-08-14 18:57:39.000000000 +0200
+++ wordpress/wp-admin/upgrade.php	2009-08-14 20:30:11.000000000 +0200
@@ -87,6 +87,7 @@
 		$backto = __get_option('home');
 	else
 		$backto = clean_url(stripslashes($_GET['backto']));
+	$backto = __get_option('home');
 ?> 
 <h2><?php _e('Step 1'); ?></h2> 
 	<p><?php printf(__("There's actually only one step. So if you see this, you're done. <a href='%s'>Have fun</a>!"),  $backto); ?></p>