bernd commited on 2007-11-09 11:00:41
Zeige 1 geänderte Dateien mit 6 Einfügungen und 0 Löschungen.
git-svn-id: https://svn.schokokeks.org/repos/tools/webinterface/trunk@771 87cf0b9e-d624-0410-a070-f6ee81989793
... | ... |
@@ -12,6 +12,12 @@ if (strstr($go, "..") or strstr($go, "./") or strstr($go, ":") or (! file_exists |
12 | 12 |
{ |
13 | 13 |
die("illegal command"); |
14 | 14 |
} |
15 |
+$tmp = explode('/', $go, 2); |
|
16 |
+$module = $tmp[0]; |
|
17 |
+if (! in_array($module, $config['modules'])) |
|
18 |
+{ |
|
19 |
+ die("illegal command"); |
|
20 |
+} |
|
15 | 21 |
|
16 | 22 |
|
17 | 23 |
/* |
18 | 24 |