[security] Fixed local path disclosure vulnerability, see PMASA-2012-2

2012-03-28 12:39:39 -04:00
parent 5ac9f508a1
commit c51817d3b8
2 changed files with 6 additions and 1 deletions
--- a/show_config_errors.php
+++ b/show_config_errors.php
@@ -14,6 +14,8 @@ error_reporting(E_ALL);
 /**
 * Read config file.
 */
-require CONFIG_FILE;
+if (is_readable(CONFIG_FILE)) {
+    require CONFIG_FILE;
+}

 ?>