Fixed bug #11710: Remove local loopback bypass in Install Tool Login (thanks to Mario...

git-svn-id: https://svn.typo3.org/TYPO3v4/Core/trunk@5838 709f56b5-9817-0410-a4d7-c38de5d9e867

diff --git a/ChangeLog b/ChangeLog
index 097932f..ad3615f 100755 (executable)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2009-08-28  Steffen Kamper  <info@sk-typo3.de>
+
+       * Fixed bug #11710: Remove local loopback bypass in Install Tool Login (thanks to Mario Rimann)
+
 2009-08-27  Steffen Kamper  <info@sk-typo3.de>
 
        * Follow-up to #11651: Allow Extbase as framework for backend modules

diff --git a/typo3/install/index.php b/typo3/install/index.php
index 5bcf792..520f495 100755 (executable)
--- a/typo3/install/index.php
+++ b/typo3/install/index.php
@@ -57,7 +57,7 @@ if (is_file($enableInstallToolFile) && (time() - filemtime($enableInstallToolFil
 }
 
        // Change 1==2 to 1==1 if you want to lock the Install Tool regardless of the file ENABLE_INSTALL_TOOL
-if (1==2 || ($_SERVER['REMOTE_ADDR']!='127.0.0.1' && !is_file($enableInstallToolFile))) {
+if (1==2 || !is_file($enableInstallToolFile)) {
        die(nl2br('<strong>The Install Tool is locked.</strong>
 
                Fix: Create a file typo3conf/ENABLE_INSTALL_TOOL