> hello, > > I have SM 1.4.6, I want apply the "local file intrusion" by >>patch global_patch.php (where the file global_patch.php = the >> download >>file from security SM web) > > I have this message : > patching file global.php > Hunk #1 FAILED at 9. > Hunk #2 succeeded at 62 (offset 1 line). > Hunk #3 succeeded at 377 (offset 1 line). > 1 out of 3 hunks FAILED -- saving rejects to file global.php.rej > > > and the global.php.rej have: > > *** 9,15 **** > * > * @copyright © 1999-2006 The SquirrelMail Project Team > * @license http://opensource.org/licenses/gpl-license.php GNU Public > License > - * @version $Id: global.php,v 1.27.2.16 2006/04/14 22:27:07 jervfors Exp > $ > * @package squirrelmail > */ > > --- 9,15 ---- > * > * @copyright © 1999-2006 The SquirrelMail Project Team > * @license http://opensource.org/licenses/gpl-license.php GNU Public > License > + * @version $Id: global.php,v 1.27.2.17 2006/06/02 02:52:15 jangliss Exp > $ > * @package squirrelmail > */ > > > what's the problem? > thanks
There is no problem. In fact only second block should be applied to global.php. First and third blocks are not required. You have tried to apply diff between two 1.4.7cvs versions. Diff between 1.4.6 and 1.4.7cvs is http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/functions/global.php?r1=1.27.2.15&r2=1.27.2.17&view=patch&pathrev=SM-1_4-STABLE Please note that patch does not include modifications in src/mailto.php. If you have register_globals turned on and apply global.php patch, you should also rearrange require_once() calls in src/mailto.php. config.php must be loaded after global.php. http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/src/mailto.php?r1=1.11.2.3&r2=1.11.2.4 -- Tomas -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@lists.sourceforge.net List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
