Changeset 13959 for branches

Timestamp:

Apr 7, 2012, 11:04:56 PM (12 years ago)

Author:

plg

Message:

bug 2613 fixed: on the theme configuration screen, make sure the
$_GETtheme is a theme id already installed.

File:

• branches/2.3/admin/theme.php (modified) (1 diff)

branches/2.3/admin/theme.php

@@ -35 +35 @@
 }
 
+include_once(PHPWG_ROOT_PATH.'admin/include/themes.class.php');
+$themes = new themes();
+if (!in_array($_GET['theme'], array_keys($themes->fs_themes)))
+{
+  die('Invalid theme');
+}
+
 $filename = PHPWG_THEMES_PATH.$_GET['theme'].'/admin/admin.inc.php';
 if (is_file($filename))