Attachment 231903 Details for Bug 262022 – Patch admin directory

[patch] Patch admin directory

patch-admin.diff (text/plain), 3.11 KB, created by Helmut Ritter on 2022-02-17 19:55:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Helmut Ritter

Created: 2022-02-17 19:55:23 UTC

Size: 3.11 KB

patch

obsolete

>--- admin/groupusers.php.orig	2020-01-19 18:03:01.000000000 +0100
>+++ admin/groupusers.php	2022-02-17 18:46:54.630851000 +0100
>@@ -53,10 +53,10 @@
>     }
>     $chkRights = $strRights;
> }
>-if (get_magic_quotes_gpc() == 0) {
>-    $chkUser   = addslashes($chkUser);
>-    $chkRights = addslashes($chkRights);
>-}
>+#if (get_magic_quotes_gpc() == 0) {
>+$chkUser   = addslashes($chkUser);
>+$chkRights = addslashes($chkRights);
>+#}
> //
> // Get datasets
> // ============
>@@ -181,4 +181,4 @@
> ?>
>         </table>
>     </body>
>-</html>
>\ No newline at end of file
>+</html>
>--- admin/helpedit.php.orig	2020-01-19 18:03:01.000000000 +0100
>+++ admin/helpedit.php	2022-02-17 18:47:17.798070000 +0100
>@@ -43,12 +43,12 @@
> //
> // Quote special characters
> // ==========================
>-if (get_magic_quotes_gpc() == 0) {
>-    $chkHidVersion = addslashes($chkHidVersion);
>-    $chkKey1       = addslashes($chkKey1);
>-    $chkKey2       = addslashes($chkKey2);
>-    $chkVersion    = addslashes($chkVersion);
>-}
>+#if (get_magic_quotes_gpc() == 0) {
>+$chkHidVersion = addslashes($chkHidVersion);
>+$chkKey1       = addslashes($chkKey1);
>+$chkKey2       = addslashes($chkKey2);
>+$chkVersion    = addslashes($chkVersion);
>+#}
> //
> // Security function for text fields
> // =================================
>--- admin/templatedefinitions.php.orig	2020-01-19 18:03:01.000000000 +0100
>+++ admin/templatedefinitions.php	2022-02-17 18:47:41.015366000 +0100
>@@ -40,9 +40,9 @@
> if ($chkDataId == '') {
>     $chkDataId = 0;
> }
>-if (get_magic_quotes_gpc() == 0) {
>-    $chkDef   = addslashes($chkDef);
>-}
>+#if (get_magic_quotes_gpc() == 0) {
>+$chkDef   = addslashes($chkDef);
>+#}
> $arrDefinition = explode('::', $chkDef);
> if ($chkType == '') {
>     exit;
>--- admin/timedefinitions.php.orig	2020-01-19 18:03:01.000000000 +0100
>+++ admin/timedefinitions.php	2022-02-17 18:48:02.272471000 +0100
>@@ -38,10 +38,10 @@
> $chkDef     = filter_input(INPUT_GET, 'def', FILTER_SANITIZE_STRING);
> $chkRange   = filter_input(INPUT_GET, 'range', FILTER_SANITIZE_STRING);
> $chkId      = filter_input(INPUT_GET, 'id', FILTER_SANITIZE_STRING);
>-if (get_magic_quotes_gpc() == 0) {
>-    $chkDef   = addslashes($chkDef);
>-    $chkRange = addslashes($chkRange);
>-}
>+#if (get_magic_quotes_gpc() == 0) {
>+$chkDef   = addslashes($chkDef);
>+$chkRange = addslashes($chkRange);
>+#}
> //
> // Get data
> // ========
>@@ -195,4 +195,4 @@
> ?>
>         </table>
>     </body>
>-</html>
>\ No newline at end of file
>+</html>
>--- admin/variabledefinitions.php.orig	2020-01-19 18:03:01.000000000 +0100
>+++ admin/variabledefinitions.php	2022-02-17 18:48:25.573841000 +0100
>@@ -37,10 +37,10 @@
> $chkDef     = filter_input(INPUT_GET, 'def', FILTER_SANITIZE_STRING);
> $chkRange   = filter_input(INPUT_GET, 'range', FILTER_SANITIZE_STRING);
> $chkLinkTab = filter_input(INPUT_GET, 'linktab', FILTER_SANITIZE_STRING);
>-if (get_magic_quotes_gpc() == 0) {
>-    $chkDef   = addslashes($chkDef);
>-    $chkRange = addslashes($chkRange);
>-}
>+#if (get_magic_quotes_gpc() == 0) {
>+$chkDef   = addslashes($chkDef);
>+$chkRange = addslashes($chkRange);
>+#}
> //
> // Get data
> // ========
>@@ -172,4 +172,4 @@
> ?>
>     </table>
> </body>
>-</html>
>\ No newline at end of file
>+</html>

Actions: View | Diff

Attachments on bug 262022: 231902 | 231903 | 231904 | 231921 | 231922