Permalink
Browse files

Avoid direct execution of installer includes (#1488895)

  • Loading branch information...
1 parent 1f87107 commit 619c320c0ee9ca39d0fada9113133724cc2a11fe @thomascube thomascube committed Jan 10, 2013
Showing with 21 additions and 0 deletions.
  1. +7 −0 installer/check.php
  2. +7 −0 installer/config.php
  3. +7 −0 installer/test.php
View
7 installer/check.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php" method="get">
<?php
View
7 installer/config.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php" method="post">
<input type="hidden" name="_step" value="2" />
<?php
View
7 installer/test.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php?_step=3" method="post">
<h3>Check config files</h3>

0 comments on commit 619c320

Please sign in to comment.