[Xerte-dev] Re: SECURITY PATCH for upload.php

[David Goodwin]

On 8 Mar 2013, at 13:54, "Smith, John" <J.J.Smith at gcu.ac.uk> wrote:

> If we get pushed for time and we need to then we can just comment out the code I added for now. All it would do then is the session check, although even that check was commented out in the svn and probably the 1.9 release, no idea why though or by who and whether adding that back in will be causing an issue…
>  
> Regards,

See the commit message etc at :

https://code.google.com/p/xerteonlinetoolkits/source/browse/trunk/modules/xerte/engine/upload.php?r=654



David.

Pale Purple Ltd.  (Company No: 5580814)
'Web and Mobile Application Development for Business'

http://www.palepurple.co.uk   
Office: 0845 0046746     Mobile: 07792380669 

Follow us on Twitter: @PalePurpleLtd

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nottingham.ac.uk/pipermail/xerte-dev/attachments/20130308/0d60b7a4/attachment.html>