------------------------------------------
                  /!\  Security bug in PhpWebGallery 1.2 /!\
                  ------------------------------------------

A security bug in the version 1.2 of PhpWebGallery enables anyone to retrieve
your database connection informations (login + password). This bug is not easy
to use but it is however important to modify files. 3 files must be updated :
 1. /include/config.inc.php
 2. /include/init.inc.php
 3. /admin/include/isadmin.inc.php

--------------------------
1. /include/config.inc.php
--------------------------
replace (line 23 or near) :
  include_once( $prefixe_include."./include/mysql.inc.php" );
  include_once( $prefixe_include."./include/functions.php" );
by :
  include_once( PREFIXE_INCLUDE."./include/mysql.inc.php" );
  include_once( PREFIXE_INCLUDE."./include/functions.php" );

------------------------
2. /include/init.inc.php
------------------------
replace (line 17 or near) :
  $prefixe_include = "";
by :
  define( PREFIXE_INCLUDE, '');

---------------------------------
2. /admin/include/isadmin.inc.php
---------------------------------
replace (line 17 or near) :
  $prefixe_include = ".";
by
  define( PREFIXE_INCLUDE, '.');