diff options
author | Evan Prodromou <evan@prodromou.name> | 2008-05-14 15:00:09 -0400 |
---|---|---|
committer | Evan Prodromou <evan@prodromou.name> | 2008-05-14 15:00:09 -0400 |
commit | 0036795582aa3fca078e744ae1bd96a9e417d361 (patch) | |
tree | 488e2cd7725834bb19c2425edb1665f95dbaa93e | |
parent | 104674fb0eb388b21ca16e014e8fda3ae5a89581 (diff) |
deny access to include files
darcs-hash:20080514190009-84dde-30f0f1b5955d71cd85563e12078ab02bf8645524.gz
-rw-r--r-- | TODO | 3 | ||||
-rw-r--r-- | action.php | 2 | ||||
-rw-r--r-- | actions/settings.php | 1 | ||||
-rw-r--r-- | classes/Notice.php | 3 | ||||
-rw-r--r-- | classes/Profile.php | 1 | ||||
-rw-r--r-- | classes/Remote_profile.php | 1 | ||||
-rw-r--r-- | classes/Subscription.php | 1 | ||||
-rw-r--r-- | classes/User.php | 1 | ||||
-rw-r--r-- | common.php | 2 | ||||
-rw-r--r-- | config.php | 2 | ||||
-rw-r--r-- | index.php | 1 | ||||
-rw-r--r-- | stream.php | 2 |
12 files changed, 18 insertions, 2 deletions
@@ -13,7 +13,8 @@ + subscribe links on profile + header menu + footer menu -- disallow direct to PHP files ++ disallow direct to PHP files +- require valid nicknames - common_local_url() - configuration system ($config) - RSS 1.0 feeds of a user's notices diff --git a/action.php b/action.php index 539077bc3..ed25ac9d8 100644 --- a/action.php +++ b/action.php @@ -1,5 +1,7 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } + class Action { // lawsuit var $args; diff --git a/actions/settings.php b/actions/settings.php index 826770ad7..b2106ec39 100644 --- a/actions/settings.php +++ b/actions/settings.php @@ -31,4 +31,3 @@ class SettingsAction extends Action { } else { $this->show_form(); } -
\ No newline at end of file diff --git a/classes/Notice.php b/classes/Notice.php index f990675fb..a25afce2b 100644 --- a/classes/Notice.php +++ b/classes/Notice.php @@ -1,4 +1,7 @@ <?php + +if (!defined('MICROBLOG')) { exit(1) } + /** * Table Definition for notice */ diff --git a/classes/Profile.php b/classes/Profile.php index be4708a55..d6535238a 100644 --- a/classes/Profile.php +++ b/classes/Profile.php @@ -1,4 +1,5 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } /** * Table Definition for profile */ diff --git a/classes/Remote_profile.php b/classes/Remote_profile.php index 6914bc2fb..dde2b39aa 100644 --- a/classes/Remote_profile.php +++ b/classes/Remote_profile.php @@ -1,4 +1,5 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } /** * Table Definition for remote_profile */ diff --git a/classes/Subscription.php b/classes/Subscription.php index 93b46b6f8..7d1881a32 100644 --- a/classes/Subscription.php +++ b/classes/Subscription.php @@ -1,4 +1,5 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } /** * Table Definition for subscription */ diff --git a/classes/User.php b/classes/User.php index 8234e0784..76f7da989 100644 --- a/classes/User.php +++ b/classes/User.php @@ -1,4 +1,5 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } /** * Table Definition for user */ diff --git a/common.php b/common.php index 3a5278e49..973b1c6e6 100644 --- a/common.php +++ b/common.php @@ -1,5 +1,7 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } + # global configuration object // default configuration, overwritten in config.php diff --git a/config.php b/config.php index c178baf9c..cd00072a6 100644 --- a/config.php +++ b/config.php @@ -1,5 +1,7 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } + $dsn = array( 'phptype' => 'pgsql', 'username' => 'someuser', @@ -1,6 +1,7 @@ <?php define('INSTALLDIR', dirname(__FILE__)); +define('MICROBLOG', true); require_once(INSTALLDIR . "/common.php"); diff --git a/stream.php b/stream.php index d30ee013c..9f972d75e 100644 --- a/stream.php +++ b/stream.php @@ -1,5 +1,7 @@ <?php +if (!defined('MICROBLOG')) { exit(1) } + define('NOTICES_PER_PAGE', 20); class StreamAction extends Action { |