posted 06-04-2003 03:18 PM
In older versions of ImageFolio it is possible to delete files below the gallery structure if a user has your login name and password of the admin area.--------------------------------
FIX FOR IF 3.1:
- Open if_lib/shared.pl
- Find:
$value =~ s/\.\.//;
- Replace it with:
$value =~ s/\.\.//g;
--------------------------------
FIX FOR IF 3.0X AND IFC:
- Open all *.cgi files
- Find:
$value =~ s/\.\.//;
- Replace it with:
$value =~ s/\.\.//g;
--------------------------------
FIX FOR ALL OTHER VERSION:
- Open all *.cgi files
- Find:
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
- Add this just below that:
$value =~ s/\.\.//g;
The ImageFolio Message Board
UBBFriend: Email This Page to Someone! 
posted 06-04-2003 03:18 PM
