aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/install/install_install.php
diff options
context:
space:
mode:
authorGraham Eames <grahamje@users.sourceforge.net>2006-07-01 21:45:35 +0000
committerGraham Eames <grahamje@users.sourceforge.net>2006-07-01 21:45:35 +0000
commit4c457ecc92bed1d4d319b2c1aa615474237c7437 (patch)
treee38944f8534a412340fbcef41cdb8b9821bb0b9f /phpBB/install/install_install.php
parent6df6eb0e601d459544b0cbcee063cf19c01bb37d (diff)
downloadforums-4c457ecc92bed1d4d319b2c1aa615474237c7437.tar
forums-4c457ecc92bed1d4d319b2c1aa615474237c7437.tar.gz
forums-4c457ecc92bed1d4d319b2c1aa615474237c7437.tar.bz2
forums-4c457ecc92bed1d4d319b2c1aa615474237c7437.tar.xz
forums-4c457ecc92bed1d4d319b2c1aa615474237c7437.zip
Prevent sqlite databases within the forum directory
git-svn-id: file:///svn/phpbb/trunk@6136 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/install/install_install.php')
-rwxr-xr-xphpBB/install/install_install.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/phpBB/install/install_install.php b/phpBB/install/install_install.php
index a2cfaea437..ecfc08031b 100755
--- a/phpBB/install/install_install.php
+++ b/phpBB/install/install_install.php
@@ -1613,6 +1613,13 @@ class install_install extends module
return false;
}
+ // Make sure we don't have a daft user who thinks having the SQLite database in the forum directory is a good idea
+ if ($dbms == 'sqlite' && stripos(phpbb_realpath($dbhost), phpbb_realpath('../')) === 0)
+ {
+ $error[] = $lang['INST_ERR_DB_FORUM_PATH'];
+ return false;
+ }
+
// Try and connect ...
if (is_array($db->sql_connect($dbhost, $dbuser, $dbpasswd, $dbname, $dbport, false)))
{