From: Joe Hunt <joe.hunt.consulting@gmail.com>
Date: Thu, 13 Sep 2007 22:54:15 +0000 (+0000)
Subject: More vulnerable. Fix.
X-Git-Tag: 2.3-final~1521
X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=commitdiff_plain;h=312c8433507bbce76ed096af48c4f4fb230162e1;p=fa-stable.git

More vulnerable. Fix.
---

diff --git a/config.php b/config.php
index 08aa993a..9387253e 100644
--- a/config.php
+++ b/config.php
@@ -23,7 +23,7 @@
 		session_save_path($session_save_path);
 		unset($session_save_path);
     }
-	if (!isset($path_to_root))
+	if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
 		exit;
     include_once($path_to_root . "/config_db.php");
     include_once($path_to_root . "/includes/lang/language.php");