← Back to branch summary

~ubuntu-branches/ubuntu/hardy/phpmyadmin/hardy-updates

« back to all changes in this revision

Viewing changes to debian/conf/lighttpd.conf

  • Committer: Bazaar Package Importer
  • Author(s): Thijs Kinkhorst
  • Date: 2007-10-17 22:54:41 UTC
  • mfrom: (1.1.14 upstream)
  • Revision ID: james.westby@ubuntu.com-20071017225441-xqwg7f10chaprdoe
Tags: 4:2.11.1.2-1
http://bugs.debian.org/446451

* New upstream release.
* Addresses two cross site scripting issues:
  PMASA-2007-5, PMASA-2007-6
  (CVE-2007-5386, closes: #446451)

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/conf/lighttpd.conf
 
1
alias.url += ( 
 
2
        "/phpmyadmin" => "/usr/share/phpmyadmin",
 
3
)
 
4
 
 
5
$HTTP["url"] =~ "^/phpmyadmin/scripts/setup.php" {
 
6
        auth.backend = "plain"
 
7
        auth.backend.plain.userfile = "/etc/phpmyadmin/htpasswd.setup"
 
8
        auth.require = (
 
9
                "/" => (
 
10
                        "method" => "basic",
 
11
                        "realm" => "phpMyAdmin Setup",
 
12
                        "require" => "valid-user"
 
13
                )
 
14
        )
 
15
}
 
16
 
 
17