links.weblogs.com.php require error?

  • Resolved Anonymous

    21 years, 9 months ago

    Shouldn’t /wp-links/links.weblogs.com.php state require_once($abspath.’b2config.php’); instead of require_once(‘b2config.php’);?

Viewing 2 replies - 1 through 2 (of 2 total)

  • b2config.php resides in the working directory specified in $abspath. links.weblogs.com.php does not, but when this script is run the it’s working directoryis not the same as $abspath, so prepending $abspath points links.weblogs.com.php to the right directory.

    Also the $abspath variable comes from b2config.php. If you have modified your installation as such I suggest you change it back because it’s a security hazard. ($abspath could be specified through the querystring and allow remote code execution.)

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘links.weblogs.com.php require error?’ is closed to new replies.