small security problem in anycontent.php

[Andi]

Hi

if you open the file anycontent.php directly, the following message appears:

Fatal error: Call to undefined function starttable() in xxx\anycontent.php on line 32

Version:
anycontent.php,v 1.10 2004/09/25 19:09:40 caspershadow

[Casper]

Yes, but anycontent.php is not designed to be called directly.  It works fine when used as designed.

How is this a security problem?

[Andi]

How is this a security problem?

Hi

so called "full path disclosure"

[kegobeer]

Fixed easily enough with

Code Select Expand

if (!defined('IN_COPPERMINE')) die('Not in Coppermine...');

[Joachim Müller]

committed to devel branch.

Joachim