From 4129665748b2a8c10b6936fa2bbe18e154165547 Mon Sep 17 00:00:00 2001 From: "Uwe.Tews@googlemail.com" Date: Mon, 30 Sep 2013 19:14:32 +0000 Subject: [PATCH] Fixed old vulnerability bug https://bugs.gentoo.org/show_bug.cgi?id=356615 --- ChangeLog | 4 ++++ libs/Smarty_Compiler.class.php | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 8e29f609..b2b4c402 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,7 @@ +2013-09-30 + + * Fixed old vulnerability bug https://bugs.gentoo.org/show_bug.cgi?id=356615 + 2013-07-16 Uwe Tews * Fixed made Smarty_Compiler.class.php compatible with PHP 5.5 diff --git a/libs/Smarty_Compiler.class.php b/libs/Smarty_Compiler.class.php index 686fe65a..49ef7d0d 100644 --- a/libs/Smarty_Compiler.class.php +++ b/libs/Smarty_Compiler.class.php @@ -2122,7 +2122,7 @@ class Smarty_Compiler extends Smarty { return null; case 'template': - $compiled_ref = "'$this->_current_file'"; + $compiled_ref = "'" . addslashes($this->_current_file) . "'"; $_max_index = 1; break;