Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLukas Reschke <lukas@statuscode.ch>2013-03-20 11:44:33 +0400
committerVicDeo <victor.dubiniuk@gmail.com>2013-03-31 16:51:29 +0400
commitd4a492d321a20b7313434cb70e307f5e84f60726 (patch)
treee68cf207e411bbe042e26c40ffc9528862ade624
parenta004266b7c0acfacf9d544fb3930c11db3a8283c (diff)
Show a warning in the installer if the used PHP version is vulnerable to the NULL Byte attack
-rw-r--r--core/templates/installation.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/core/templates/installation.php b/core/templates/installation.php
index 842686932c7..c70903cba55 100644
--- a/core/templates/installation.php
+++ b/core/templates/installation.php
@@ -19,6 +19,13 @@
<?php endforeach; ?>
</ul>
<?php endif; ?>
+ <?php if($_['vulnerableToNullByte']): ?>
+ <fieldset class="warning">
+ <legend><strong><?php p($l->t('Security Warning'));?></strong></legend>
+ <p><?php p($l->t('Your PHP version is vulnerable to the NULL Byte attack (CVE-2006-7243)'));?><br/>
+ <?php p($l->t('Please update your PHP installation to use ownCloud securely.'));?></p>
+ </fieldset>
+ <?php endif; ?>
<?php if(!$_['secureRNG']): ?>
<fieldset class="warning">
<legend><strong><?php p($l->t('Security Warning'));?></strong></legend>