aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGraham Eames <grahamje@users.sourceforge.net>2006-06-10 21:08:01 +0000
committerGraham Eames <grahamje@users.sourceforge.net>2006-06-10 21:08:01 +0000
commit8b40e7fe330b4b18b18116c7a0d197186860e7df (patch)
treeb56699a06ce9541cacdce83882ebefd3b2e1b34c
parentc102bec02311a093030b353d6ea8b8eed0a85885 (diff)
downloadforums-8b40e7fe330b4b18b18116c7a0d197186860e7df.tar
forums-8b40e7fe330b4b18b18116c7a0d197186860e7df.tar.gz
forums-8b40e7fe330b4b18b18116c7a0d197186860e7df.tar.bz2
forums-8b40e7fe330b4b18b18116c7a0d197186860e7df.tar.xz
forums-8b40e7fe330b4b18b18116c7a0d197186860e7df.zip
Try and protect against users being silly and trying to go direct to a later page
git-svn-id: file:///svn/phpbb/trunk@6044 89ea8834-ac86-4346-8a33-228a782c2dd0
-rwxr-xr-xphpBB/install/install_install.php32
1 files changed, 32 insertions, 0 deletions
diff --git a/phpBB/install/install_install.php b/phpBB/install/install_install.php
index 6800e29f3e..c4b548cd5f 100755
--- a/phpBB/install/install_install.php
+++ b/phpBB/install/install_install.php
@@ -517,6 +517,14 @@ class install_install extends module
$$var = request_var($var, '');
}
+ if ($dbname == '')
+ {
+ // Someone's been silly and tried calling this page direct
+ // So we send them back to the start to do it again properly
+ header('Location: index.' . $phpEx . '?mode=install');
+ exit;
+ }
+
$s_hidden_fields = ($img_imagick) ? '<input type="hidden" name="img_imagick" value="' . addslashes($img_imagick) . '" />' : '';
$passed = false;
@@ -668,6 +676,14 @@ class install_install extends module
$$var = request_var($var, '');
}
+ if ($dbname == '')
+ {
+ // Someone's been silly and tried calling this page direct
+ // So we send them back to the start to do it again properly
+ header('Location: index.' . $phpEx . '?mode=install');
+ exit;
+ }
+
$s_hidden_fields = ($img_imagick) ? '<input type="hidden" name="img_imagick" value="' . addslashes($img_imagick) . '" />' : '';
$written = false;
@@ -804,6 +820,14 @@ class install_install extends module
$$var = request_var($var, '');
}
+ if ($dbname == '')
+ {
+ // Someone's been silly and tried calling this page direct
+ // So we send them back to the start to do it again properly
+ header('Location: index.' . $phpEx . '?mode=install');
+ exit;
+ }
+
$s_hidden_fields = ($img_imagick) ? '<input type="hidden" name="img_imagick" value="' . addslashes($img_imagick) . '" />' : '';
$email_enable = ($email_enable !== '') ? $email_enable : true;
@@ -872,6 +896,14 @@ class install_install extends module
$$var = request_var($var, '');
}
+ if ($dbname == '')
+ {
+ // Someone's been silly and tried calling this page direct
+ // So we send them back to the start to do it again properly
+ header('Location: index.' . $phpEx . '?mode=install');
+ exit;
+ }
+
$cookie_domain = ($server_name != '') ? $server_name : (!empty($_SERVER['SERVER_NAME'])) ? $_SERVER['SERVER_NAME'] : getenv('SERVER_NAME');
// If we get here and the extension isn't loaded it should be safe to just go ahead and load it