Changeset 13959


Ignore:
Timestamp:
04/07/12 23:04:56 (8 years ago)
Author:
plg
Message:

bug 2613 fixed: on the theme configuration screen, make sure the
$_GETtheme is a theme id already installed.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.3/admin/theme.php

    r8728 r13959  
    3535} 
    3636 
     37include_once(PHPWG_ROOT_PATH.'admin/include/themes.class.php'); 
     38$themes = new themes(); 
     39if (!in_array($_GET['theme'], array_keys($themes->fs_themes))) 
     40{ 
     41  die('Invalid theme'); 
     42} 
     43 
    3744$filename = PHPWG_THEMES_PATH.$_GET['theme'].'/admin/admin.inc.php'; 
    3845if (is_file($filename)) 
Note: See TracChangeset for help on using the changeset viewer.