Fixed bug #13292: TYPO3 error message reveals path to web root (thanks to Xavier...

git-svn-id: https://svn.typo3.org/TYPO3v4/Core/trunk@8323 709f56b5-9817-0410-a4d7-c38de5d9e867

diff --git a/ChangeLog b/ChangeLog
index 6e026cd..9ae5d11 100755 (executable)
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,6 +3,7 @@
        * Raised Extbase and Fluid from 1.2.0 to 1.2.1
        * Fixed bug #14953: XSS in (new) taskcenter (thanks to Georg Ringer)
        * Fixed bug #14978: XSS in file tree (thanks to Georg Ringer)
+       * Fixed bug #13292: TYPO3 error message reveals path to web root (thanks to Xavier Perseguers)
 
 2010-07-27  Steffen Kamper  <steffen@typo3.org>
 

diff --git a/typo3/init.php b/typo3/init.php
index 4be8706..2bc12d7 100644 (file)
--- a/typo3/init.php
+++ b/typo3/init.php
@@ -137,7 +137,10 @@ if (!$temp_path || substr($temp_path,-strlen(TYPO3_mainDir))!=TYPO3_mainDir)       {       /
                echo 'It seems you are trying to run the TYPO3 source libraries DIRECTLY! You cannot do that.<br />
                Please read the installation documents for more information.';
        } else {
-               echo 'This happens if the last '.strlen(TYPO3_mainDir).' characters of this path, '.$temp_path.' ($temp_path), is NOT "'.TYPO3_mainDir.'" for some reason.<br />
+               $temp_path_parts = explode('/', $temp_path);
+               $temp_path_parts = array_slice($temp_path_parts, count($temp_path_parts) - 3);
+               $temp_path = '..../' . implode('/', $temp_path_parts);
+               echo 'This happens if the last ' . strlen(TYPO3_mainDir) . ' characters of this path, ' . $temp_path . ' (end of $temp_path), is NOT "' . TYPO3_mainDir . '" for some reason.<br />
                You may have a strange server configuration.
                Or maybe you didn\'t set constant TYPO3_MOD_PATH in your module?';
        }