maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

secure scripts which should not be called directly (install/update stuff); avoid url-manipulation

Browse Source 
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann (d00p)
2014-12-27 15:13:25 +01:00
parent 4523ef87b7
commit 4b0507c4d3
4 changed files with 35 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
install/updatesql.php
View File

@@ -17,6 +17,15 @@
*
*/
if (!defined('AREA')
|| (defined('AREA') && AREA != 'admin')
|| !isset($userinfo['loginname'])
|| (isset($userinfo['loginname']) && $userinfo['loginname'] == '')
) {
header('Location: ../index.php');
exit;
}
$updatelog = FroxlorLogger::getInstanceOf(array('loginname' => 'updater'));
$updatelogfile = validateUpdateLogFile(makeCorrectFile(dirname(__FILE__).'/update.log'));