1 | <?php |
---|
2 | // +-----------------------------------------------------------------------+ |
---|
3 | // | PhpWebGallery - a PHP based picture gallery | |
---|
4 | // | Copyright (C) 2002-2003 Pierrick LE GALL - pierrick@phpwebgallery.net | |
---|
5 | // | Copyright (C) 2003-2007 PhpWebGallery Team - http://phpwebgallery.net | |
---|
6 | // +-----------------------------------------------------------------------+ |
---|
7 | // | branch : BSF (Best So Far) |
---|
8 | // | file : $Id: plugin.php 1731 2007-01-18 02:09:31Z rvelices $ |
---|
9 | // | last update : $Date: 2007-01-18 02:09:31 +0000 (Thu, 18 Jan 2007) $ |
---|
10 | // | last modifier : $Author: rvelices $ |
---|
11 | // | revision : $Revision: 1731 $ |
---|
12 | // +-----------------------------------------------------------------------+ |
---|
13 | // | This program is free software; you can redistribute it and/or modify | |
---|
14 | // | it under the terms of the GNU General Public License as published by | |
---|
15 | // | the Free Software Foundation | |
---|
16 | // | | |
---|
17 | // | This program is distributed in the hope that it will be useful, but | |
---|
18 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
---|
19 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
---|
20 | // | General Public License for more details. | |
---|
21 | // | | |
---|
22 | // | You should have received a copy of the GNU General Public License | |
---|
23 | // | along with this program; if not, write to the Free Software | |
---|
24 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
---|
25 | // | USA. | |
---|
26 | // +-----------------------------------------------------------------------+ |
---|
27 | |
---|
28 | if( !defined("PHPWG_ROOT_PATH") ) |
---|
29 | { |
---|
30 | die ("Hacking attempt!"); |
---|
31 | } |
---|
32 | |
---|
33 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
---|
34 | check_status(ACCESS_ADMINISTRATOR); |
---|
35 | |
---|
36 | $sections = explode('/', $_GET['section'] ); |
---|
37 | for ($i=0; $i<count($sections); $i++) |
---|
38 | { |
---|
39 | if (empty($sections[$i]) or $sections[$i]=='..') |
---|
40 | { |
---|
41 | unset($sections[$i]); |
---|
42 | $i--; |
---|
43 | } |
---|
44 | } |
---|
45 | |
---|
46 | if (count($sections)<2) |
---|
47 | { |
---|
48 | die('Invalid plugin URL'); |
---|
49 | } |
---|
50 | |
---|
51 | $plugin_id = $sections[0]; |
---|
52 | $check_db_plugin = get_db_plugins('active', $plugin_id ); |
---|
53 | if (empty($check_db_plugin)) |
---|
54 | { |
---|
55 | die('Invalid URL - plugin '.$plugin_id.' not active'); |
---|
56 | } |
---|
57 | |
---|
58 | $filename = PHPWG_PLUGINS_PATH.implode('/', $sections); |
---|
59 | if (is_file($filename)) |
---|
60 | { |
---|
61 | include_once($filename); |
---|
62 | } |
---|
63 | else |
---|
64 | { |
---|
65 | die('Missing file '.$filename); |
---|
66 | } |
---|
67 | ?> |
---|