From 271aa93be2e31bf9d1850532ff6c5ac083694919 Mon Sep 17 00:00:00 2001
From: Bram <33527907+bram1000@users.noreply.github.com>
Date: Thu, 6 Jul 2023 22:31:29 +0200
Subject: [PATCH] Fix CVE-2023-36994
---
install/process.php | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/install/process.php b/install/process.php
index b7925e41..814ece82 100644
--- a/install/process.php
+++ b/install/process.php
@@ -12,6 +12,10 @@
// don't let SQL time out when 30-500 seconds (depending on php.ini) is not enough
@set_time_limit(0);
+if (file_exists("../var/installed")) {
+ die("ERROR!
Installation appears to have been completed.
If this is an error remove /var/installed file in install directory.");
+}
+
class Process {
function __construct() {