Changeset 13959


Ignore:
Timestamp:
Apr 7, 2012, 11:04:56 PM (8 years ago)
Author:
plg
Message:

bug 2613 fixed: on the theme configuration screen, make sure the
$_GETtheme is a theme id already installed.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/2.3/admin/theme.php

    r8728 r13959  
    3535}
    3636
     37include_once(PHPWG_ROOT_PATH.'admin/include/themes.class.php');
     38$themes = new themes();
     39if (!in_array($_GET['theme'], array_keys($themes->fs_themes)))
     40{
     41  die('Invalid theme');
     42}
     43
    3744$filename = PHPWG_THEMES_PATH.$_GET['theme'].'/admin/admin.inc.php';
    3845if (is_file($filename))
Note: See TracChangeset for help on using the changeset viewer.