[CVE-2019-12204]: install.php warning does not account for public dir

This commit is contained in:
Aaron Carlino 2019-08-20 21:45:29 +12:00
parent 8ccd7f2b6f
commit f98a59deb5

View File

@ -2011,7 +2011,7 @@ class SiteTree extends DataObject implements PermissionProvider, i18nEntityProvi
);
}
if (file_exists(BASE_PATH . '/install.php')) {
if (file_exists(PUBLIC_PATH . '/install.php')) {
$fields->addFieldToTab('Root.Main', LiteralField::create(
'InstallWarningHeader',
'<div class="alert alert-warning">' . _t(