From 795ebc487667cd4edcf224121e57880c4e599891 Mon Sep 17 00:00:00 2001 From: "jocuri%softhome.net" <> Date: Wed, 8 Oct 2003 02:37:09 +0000 Subject: [PATCH] Bug 213384: shutdownhtml login bypass via editparams.cgi is broken under suexec. r=kiko, a=justdave --- CGI.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CGI.pl b/CGI.pl index de983122b1..b3e879a2d8 100644 --- a/CGI.pl +++ b/CGI.pl @@ -58,7 +58,7 @@ use vars qw($template $vars); # to the user about the downtime. (do)editparams.cgi is exempted from # this message, of course, since it needs to be available in order for # the administrator to open Bugzilla back up. -if (Param("shutdownhtml") && $0 !~ m:[\\/](do)?editparams.cgi$:) { +if (Param("shutdownhtml") && $0 !~ m:(^|[\\/])(do)?editparams\.cgi$:) { # The shut down message we are going to display to the user. $::vars->{'title'} = "Bugzilla is Down"; $::vars->{'h1'} = "Bugzilla is Down"; -- 2.47.2