Fixed restrictions on /fbview. Fixes issue 1507.

1 files changed, 5 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 4a30125..70a4a95 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,10 @@
 2007-02-02  Sascha Wilde  <wilde@intevation.de>
 
+	* php/admin/templates/kolab.tpl: Restrict access to /fbview* to
+	save us from attacks against any of the various horde files.
+	Fixes issue 1507.  And fixed minor bug in the usage of
+	@webserver_web_prefix@.
+
 	* php/admin/templates/kolab.tpl, www/admin/kolab/versions.php.in:
 	Corrected version information, fixing last parts of issue 1486.