diff options
| author | thomascube <thomas@roundcube.net> | 2005-09-29 20:30:10 +0000 |
|---|---|---|
| committer | thomascube <thomas@roundcube.net> | 2005-09-29 20:30:10 +0000 |
| commit | 539cd47824ec6b03b44f9f7c5af8a1e60df0458b (patch) | |
| tree | ec90fc2acd6dab9ad71bc19a51ee9d989a4e3ef5 /program/steps | |
| parent | 30233b8dfb7fe5070dfa11b3e6d2015fb50aa769 (diff) | |
Fix for URL injection vulnerability (Bug #1307966)
Diffstat (limited to 'program/steps')
| -rw-r--r-- | program/steps/error.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/program/steps/error.inc b/program/steps/error.inc index efe30407e..9e5757d7b 100644 --- a/program/steps/error.inc +++ b/program/steps/error.inc @@ -52,7 +52,7 @@ else if ($ERROR_CODE==401) else if ($ERROR_CODE==404) { $__error_title = "REQUEST FAILED/FILE NOT FOUND"; - $request_url = $GLOBALS['HTTP_HOST'].$GLOBALS['REQUEST_URI']; + $request_url = $_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']; $__error_text = <<<EOF The requested page was not found!<br /> Please contact your server-administrator. |