From 90759fa8a1a5187d881763ea89f9ca2f0a5f8a4a Mon Sep 17 00:00:00 2001 From: Antoine Musso Date: Mon, 29 Jan 2007 21:15:34 +0000 Subject: [PATCH] Fix #8819: full patch disclosure with skin dependencies. --- RELEASE-NOTES | 1 + skins/Chick.deps.php | 5 ++++- skins/MonoBook.deps.php | 5 ++++- skins/MySkin.deps.php | 5 ++++- skins/Simple.deps.php | 5 ++++- 5 files changed, 17 insertions(+), 4 deletions(-) diff --git a/RELEASE-NOTES b/RELEASE-NOTES index c1b05d60b6..b0223e18ba 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -154,6 +154,7 @@ lighter making things easier to read. * Fix multipage selector drop-down for DjVu images to work when title is passed as a query string parameter; we have to pass the title as a form parameter or it gets dropped from the form submission URL +* (bug 8819) Fix full path disclosure in with skins dependencies == Languages updated == diff --git a/skins/Chick.deps.php b/skins/Chick.deps.php index 273ac18b44..a178a79195 100644 --- a/skins/Chick.deps.php +++ b/skins/Chick.deps.php @@ -5,6 +5,9 @@ // changed on a subsequent page view. // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html +if ( ! defined( 'MEDIAWIKI' ) ) + die( 1 ); + require_once('includes/SkinTemplate.php'); require_once('MonoBook.php'); -?> \ No newline at end of file +?> diff --git a/skins/MonoBook.deps.php b/skins/MonoBook.deps.php index 8a78ae6bb3..b054c840c2 100644 --- a/skins/MonoBook.deps.php +++ b/skins/MonoBook.deps.php @@ -5,5 +5,8 @@ // changed on a subsequent page view. // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html +if ( ! defined( 'MEDIAWIKI' ) ) + die( 1 ); + require_once('includes/SkinTemplate.php'); -?> \ No newline at end of file +?> diff --git a/skins/MySkin.deps.php b/skins/MySkin.deps.php index ea0455f222..ba00558b10 100644 --- a/skins/MySkin.deps.php +++ b/skins/MySkin.deps.php @@ -5,6 +5,9 @@ // changed on a subsequent page view. // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html +if ( ! defined( 'MEDIAWIKI' ) ) + die( 1 ); + require_once('includes/SkinTemplate.php'); require_once('MonoBook.php'); -?> \ No newline at end of file +?> diff --git a/skins/Simple.deps.php b/skins/Simple.deps.php index ffc51557ab..369f6b00ce 100644 --- a/skins/Simple.deps.php +++ b/skins/Simple.deps.php @@ -5,6 +5,9 @@ // changed on a subsequent page view. // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html +if ( ! defined( 'MEDIAWIKI' ) ) + die( 1 ); + require_once('includes/SkinTemplate.php'); require_once('MonoBook.php'); -?> \ No newline at end of file +?> -- 2.20.1