File Uploader: Prevent users without a valid LimeSurvey session from …

…accessing the file uploader. git-svn-id: file:///Users/Shitiz/Downloads/lssvn/source/limesurvey_dev@9390 b72ed6b6-b9f8-46b5-92b4-906544132732
LimeSurvey · Nov 1, 2010 · b440aee · b440aee
1 parent 438bd5d
commit b440aee
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/uploader.php b/uploader.php
@@ -51,6 +51,11 @@
 session_set_cookie_params(0,$relativeurl.'/');
 @session_start();
 
+if (empty($_SESSION) || !isset($_SESSION['fieldname']))
+{
+    die("You don't have a valid session !");
+}
+
 echo $header;
 
 $body = '