Raising security... Last fixes - please test!

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/source/limesurvey@3208 b72ed6b6-b9f8-46b5-92b4-906544132732

admin/admin.php

@@ -237,10 +237,11 @@
 
 
 
- if (!isset($assessmentsoutput) && !isset($conditionsoutput) &&
+ if (!isset($assessmentsoutput) && !isset($statisticsoutput) && !isset($browseoutput) && !isset($savedsurveyoutput) &&             
+     !isset($dataentryoutput) && !isset($conditionsoutput) && !isset($importoldresponsesoutput) && !isset($vvoutput) && !isset($tokenoutput) &&     
      (isset($surveyid) || $action=="listurveys" || $action=="changelang" ||  $action=="checksettings" ||       //Still to check
       $action=="editsurvey" || $action=="updatesurvey" || $action=="ordergroups"  ||
-      $action=="uploadf" || $action=="newsurvey" || $action=="listsurveys" || 
+      $action=="uploadf" || $action=="newsurvey" || $action=="listsurveys" ||   
       $action=="surveyrights") ) include("html.php");
 
  if ($action=="addquestion" || $action=="copyquestion" || $action=="editquestion" || 
@@ -269,7 +270,7 @@
         $adminoutput.= showadminmenu();
       }
 
-
+                                                                        
   if (isset($databaseoutput))  {$adminoutput.= $databaseoutput;} 	
   if (isset($templatesoutput)) {$adminoutput.= $templatesoutput;}
   if (isset($accesssummary  )) {$adminoutput.= $accesssummary;}