#! /bin/sh /usr/share/dpatch/dpatch-run
## 01_fix-CVE-2007-4048.dpatch by Nico Golde <nion@debian.org>
##
## All lines beginning with `## DP:' are a description of the patch.
## DP: No description.

@DPATCH@
diff -urNad egroupware-1.2.107-2.dfsg~/phpsysinfo/includes/system_footer.php egroupware-1.2.107-2.dfsg/phpsysinfo/includes/system_footer.php
--- egroupware-1.2.107-2.dfsg~/phpsysinfo/includes/system_footer.php	2007-06-05 17:22:18.000000000 +0200
+++ egroupware-1.2.107-2.dfsg/phpsysinfo/includes/system_footer.php	2007-09-03 12:38:34.000000000 +0200
@@ -28,7 +28,7 @@
 if (!$hide_picklist) {
   echo "<center>";
 
-  $update_form = "<form method=\"POST\" action=\"" . $_SERVER['PHP_SELF'] . "\">\n" . "\t" . $text['template'] . ":&nbsp;\n" . "\t<select name=\"template\">\n";
+  $update_form = "<form method=\"POST\" action=\"" . htmlentities($_SERVER['PHP_SELF']) . "\">\n" . "\t" . $text['template'] . ":&nbsp;\n" . "\t<select name=\"template\">\n";
 
   $dir = opendir(APP_ROOT . '/templates/');
   while (false !== ($file = readdir($dir))) {