Fixed bug #11710: Remove local loopback bypass in Install Tool Login (thanks to Mario...
authorSteffen Kamper <info@sk-typo3.de>
Fri, 28 Aug 2009 08:50:07 +0000 (08:50 +0000)
committerSteffen Kamper <info@sk-typo3.de>
Fri, 28 Aug 2009 08:50:07 +0000 (08:50 +0000)
git-svn-id: https://svn.typo3.org/TYPO3v4/Core/trunk@5838 709f56b5-9817-0410-a4d7-c38de5d9e867

ChangeLog
typo3/install/index.php

index 097932f..ad3615f 100755 (executable)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2009-08-28  Steffen Kamper  <info@sk-typo3.de>
+
+       * Fixed bug #11710: Remove local loopback bypass in Install Tool Login (thanks to Mario Rimann)
+
 2009-08-27  Steffen Kamper  <info@sk-typo3.de>
 
        * Follow-up to #11651: Allow Extbase as framework for backend modules
index 5bcf792..520f495 100755 (executable)
@@ -57,7 +57,7 @@ if (is_file($enableInstallToolFile) && (time() - filemtime($enableInstallToolFil
 }
 
        // Change 1==2 to 1==1 if you want to lock the Install Tool regardless of the file ENABLE_INSTALL_TOOL
-if (1==2 || ($_SERVER['REMOTE_ADDR']!='127.0.0.1' && !is_file($enableInstallToolFile))) {
+if (1==2 || !is_file($enableInstallToolFile)) {
        die(nl2br('<strong>The Install Tool is locked.</strong>
 
                Fix: Create a file typo3conf/ENABLE_INSTALL_TOOL