From 6df993a22dd55cb29aad9b0c173b5dd0f54e42c7 Mon Sep 17 00:00:00 2001
From: "jocuri%softhome.net" <>
Date: Wed, 8 Oct 2003 02:15:35 +0000
Subject: Bug 213384: shutdownhtml login bypass via editparams.cgi is broken
 under suexec. r=kiko, a=justdave

---
 CGI.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'CGI.pl')

diff --git a/CGI.pl b/CGI.pl
index 75174dcba..bcd9a7f90 100644
--- a/CGI.pl
+++ b/CGI.pl
@@ -55,7 +55,7 @@ use vars qw($template $vars);
 # to the user about the downtime.  (do)editparams.cgi is exempted from
 # this message, of course, since it needs to be available in order for
 # the administrator to open Bugzilla back up.
-if (Param("shutdownhtml") && $0 !~ m:[\\/](do)?editparams.cgi$:) {
+if (Param("shutdownhtml") && $0 !~ m:(^|[\\/])(do)?editparams\.cgi$:) {
     $::vars->{'message'} = "shutdown";
     
     # Return the appropriate HTTP response headers.
-- 
cgit v1.2.3-24-g4f1b