From: Moritz Bunkus <m.bunkus@linet-services.de>
Date: Fri, 11 May 2007 12:12:30 +0000 (+0000)
Subject: open() nur mit sicheren Argumenten aufrufen.
X-Git-Tag: release-2.4.3^2~339
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=8cbf20b55bb339ed4940711d371d6b607dcac8e4;p=kivitendo-erp.git

open() nur mit sicheren Argumenten aufrufen.
---

diff --git a/bin/mozilla/admin.pl b/bin/mozilla/admin.pl
index 879ccd749..4e33ef200 100644
--- a/bin/mozilla/admin.pl
+++ b/bin/mozilla/admin.pl
@@ -694,11 +694,6 @@ sub form_header {
   @a = <FH>;
   close(FH);
 
-  if (open(FH, "custom_$menufile")) {
-    push @a, <FH>;
-  }
-  close(FH);
-
   foreach $item (@a) {
     next unless $item =~ /\[/;
     next if $item =~ /\#/;
@@ -971,6 +966,9 @@ sub save {
     }
   }
 
+  $form->{templates}       =~ s|.*/||;
+  $form->{mastertemplates} =~ s|.*/||;
+
   # create user template directory and copy master files
   if (!-d "$form->{templates}") {
     umask(002);