This patch corrects admin CP templates to prevent access to administrative data from
outside the H-Sphere admin control panel. The instructions apply to versions 2.3 RC1 and RC2. If you are
running version 2.2, please refer to Template Security Patch for 2.2.
Version 2.3 RC3 will have this fix included.
To install the patch:
- Log into your control panel server as root.
- Download the patch:
wget http://www.psoft.net/shiv/HSUpdate-23/SECURITY_TEMPLATE_PATCH.tgz
- Unpack the downloaded file:
tar xfz SECURITY_TEMPLATE_PATCH.tgz
- Change dir to where you have unpacked the patch:
cd SECURITY_TEMPLATE_PATCH
- Type 'make install' to install the patch.
- Restart Control Panel (see here for instructions).
Note: If you have problems after installing this patch, you can return to the previous state
by simply reinstalling 2.3 RC2 upgrade and then applying the ultimate patch and the billing patch.
|