Am 06.01.2013 18:40, schrieb A.L.E.C:
> On 01/06/2013 06:24 PM, Aleksandar Lazic wrote:
>> After that I wanted to check my set-up.
>>
>> [06-Jan-2013 17:35:48 Europe/Vienna] PHP Fatal error:  Call to a member
>> function pass() on
>> a non-object in rc08rc_git/installer/check.php on line 80
> 
> Do you call check.php file directly? It won't work this way

then it is a bug

includes have to make sure that they are NEVER called diretly

especially if they are throwing errors which may lead to a DOS attack
by filling the filesystem with logs and if someone as good reportings
the mailserver too

the other reason is plain security:
you have no idea how vulnerable a include is which calls code with
whatever inputs and initialization with sanity checks my be bypassed


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Roundcube Development discussion mailing list
[email protected]
http://lists.roundcube.net/mailman/listinfo/dev

Reply via email to