Für LifeType gibt es einen Patch:
LifeType 1.0.x and 1.1.x will reveal full paths if users attempt to point their browser at any of the .php files available under the class/ or plugins/ folder. This is considered a minor issue by the development team but it could be used by malicious parties to gather information about the server and therefore it is recommended to patch all LifeType installations.
Die Lösung besteht aus zwei .htaccess-Dateien für das "class"- und für das "plugins"-Verzeichnis.
[ Zum Download im LifeType Development Journal ]
Technorati Tags: lifetype, cms, blog