Comment 15 for bug 1093967

Revision history for this message
Dan Garner (dangarner) wrote :

I did rewrite the entire file... it was loading the file requested by "p" before it had validated security. Now it will always either a) validate security in the DB, or b) check that p is in the following array:

private $nonAuthedPages = array('index', 'clock');