fixed #8980: possible to execute arbitrary perl code as any user that can upload files

This commit is contained in:
Graham Knop 2008-10-27 23:41:38 +00:00
parent 7d33b9fab8
commit b57b632810
2 changed files with 5 additions and 1 deletions

View file

@ -1,4 +1,5 @@
7.6.2
- fixed #8980: possible to execute arbitrary perl code as any user that can upload files
- added extras to user profile fields. these can be accessed using the
profile.form.element.extras template variable when editing a profile
and the profile.extras field when viewing a profile.