PHP Vulnerability Possibly Affecting SPAW 1.x Installations
January 19th, 2007 by ailonIn case you are running SPAW 1.x on PHP4 with version number below 4.4.3 or PHP5 version below 5.1.4 and have register_globals turned on, you should upgrade SPAW to version 1.2.4 or version 2.
SPAW Editor PHP Edition version 1.2.4 can be downloaded from here. Package to upgrade version 1.2.3 to 1.2.4 is available here.
In case you are running version earlier than 1.2.3 and don’t want to upgrade, just open the file dialogs/img_library.php and change the line 16:
unset($spaw_imglib_include);
to:
if (isset($spaw_imglib_include)) die(’set this in configuration’);