[Phpgroupware-cvs] calendar/phpgroupware.org accept_holiday.php, 1.1.2.1, 1.1.2.2

[Dave Hall <address@hidden>]

Update of /cvsroot/phpgroupware/calendar/phpgroupware.org
In directory subversions:/tmp/cvs-serv23443/phpgroupware.org

Modified Files:
      Tag: Version-0_9_14-branch
        accept_holiday.php 
Log Message:
security fix

Index: accept_holiday.php
===================================================================
RCS file: /cvsroot/phpgroupware/calendar/phpgroupware.org/accept_holiday.php,v
retrieving revision 1.1.2.1
retrieving revision 1.1.2.2
diff -C2 -d -r1.1.2.1 -r1.1.2.2
*** accept_holiday.php  27 Feb 2003 19:16:10 -0000      1.1.2.1
--- accept_holiday.php  17 Oct 2003 01:30:02 -0000      1.1.2.2
***************
*** 12,17 ****
        /* $Id$ */
  
!       $send_back_to = 
str_replace('submitlocale','holiday_admin',$HTTP_REFERER);
!       $send_back_to = str_replace('submit','admin',$HTTP_REFERER);    // 
0.9.14.xxx
        if(!$locale)
        {
--- 12,17 ----
        /* $Id$ */
  
!       $send_back_to = 
str_replace('submitlocale','holiday_admin',$HTTP_SERVER_VARS['HTTP_REFERER']);
!       $send_back_to = 
str_replace('submit','admin',$HTTP_SERVER_VARS['HTTP_REFERER']);        // 
0.9.14.xxx
        if(!$locale)
        {
***************
*** 20,24 ****
  
        $send_back_to = str_replace('&locale='.$locale,'',$send_back_to);
!       $file = './holidays.'.$locale;
        if(!file_exists($file))
        {
--- 20,24 ----
  
        $send_back_to = str_replace('&locale='.$locale,'',$send_back_to);
!       $file = './holidays.'.$locale.'.txt';
        if(!file_exists($file))
        {