MantisBT: master-1.2.x 54aace93

Author Committer Branch Timestamp Parent
dhx dhx master-1.2.x 2010-12-14 18:56 master-1.2.x d67c4deb
Affected Issues  0012607: LFI/FD and XSS in the 'upgrade_unattended.php'
Changeset

Fix 0012607: Update installation instructions regarding admin directory

The /admin/ directory should be removed after installation or upgrading
of MantisBT. The installation instructions did not state this
requirement and therefore it was quite easy for users to leave this
potentially dangerous directory in place on live installations of
MantisBT connected to the Internet.

mod - doc/INSTALL Diff File