| 1 | <?php |
|---|
| 2 | // +-----------------------------------------------------------------------+ |
|---|
| 3 | // | Piwigo - a PHP based photo gallery | |
|---|
| 4 | // +-----------------------------------------------------------------------+ |
|---|
| 5 | // | Copyright(C) 2008-2014 Piwigo Team http://piwigo.org | |
|---|
| 6 | // | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net | |
|---|
| 7 | // | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick | |
|---|
| 8 | // +-----------------------------------------------------------------------+ |
|---|
| 9 | // | This program is free software; you can redistribute it and/or modify | |
|---|
| 10 | // | it under the terms of the GNU General Public License as published by | |
|---|
| 11 | // | the Free Software Foundation | |
|---|
| 12 | // | | |
|---|
| 13 | // | This program is distributed in the hope that it will be useful, but | |
|---|
| 14 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
|---|
| 15 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
|---|
| 16 | // | General Public License for more details. | |
|---|
| 17 | // | | |
|---|
| 18 | // | You should have received a copy of the GNU General Public License | |
|---|
| 19 | // | along with this program; if not, write to the Free Software | |
|---|
| 20 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
|---|
| 21 | // | USA. | |
|---|
| 22 | // +-----------------------------------------------------------------------+ |
|---|
| 23 | |
|---|
| 24 | if( !defined("PHPWG_ROOT_PATH") ) |
|---|
| 25 | { |
|---|
| 26 | die ("Hacking attempt!"); |
|---|
| 27 | } |
|---|
| 28 | |
|---|
| 29 | include_once(PHPWG_ROOT_PATH.'admin/include/functions.php'); |
|---|
| 30 | check_status(ACCESS_ADMINISTRATOR); |
|---|
| 31 | |
|---|
| 32 | $sections = explode('/', $_GET['section'] ); |
|---|
| 33 | for ($i=0; $i<count($sections); $i++) |
|---|
| 34 | { |
|---|
| 35 | if (empty($sections[$i]) or $sections[$i]=='..') |
|---|
| 36 | { |
|---|
| 37 | unset($sections[$i]); |
|---|
| 38 | $i--; |
|---|
| 39 | } |
|---|
| 40 | } |
|---|
| 41 | |
|---|
| 42 | if (count($sections)<2) |
|---|
| 43 | { |
|---|
| 44 | die('Invalid plugin URL'); |
|---|
| 45 | } |
|---|
| 46 | |
|---|
| 47 | $plugin_id = $sections[0]; |
|---|
| 48 | if ( !isset($pwg_loaded_plugins[$plugin_id]) ) |
|---|
| 49 | { |
|---|
| 50 | die('Invalid URL - plugin '.$plugin_id.' not active'); |
|---|
| 51 | } |
|---|
| 52 | |
|---|
| 53 | $filename = PHPWG_PLUGINS_PATH.implode('/', $sections); |
|---|
| 54 | if (is_file($filename)) |
|---|
| 55 | { |
|---|
| 56 | include_once($filename); |
|---|
| 57 | } |
|---|
| 58 | else |
|---|
| 59 | { |
|---|
| 60 | die('Missing file '.$filename); |
|---|
| 61 | } |
|---|
| 62 | ?> |
|---|
