Manual security hack in 1.6 and 1.7

From ClaroDevel


Ceci est un texte en préparation ne pas le considérer comme étant valide pour le moment



If you run a claroline, you need to make some change manually

auth.conf.php

search the file

/claroline/inc/conf/auth.conf.php

and add in the second line :

if ((bool) stristr($_SERVER['PHP_SELF'], basename(__FILE__))) die('---');

extauth/driver

remove driver you dont use in claroline/auth/extauth/driver/*.inc.php

pdf_sample_generator

remove this file if still in

/claroline/document/