Changeset 20706
- Timestamp:
- Feb 11, 2013, 10:49:28 PM (11 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/2.4/install.php
r13956 r20706 110 110 defined('PWG_LOCAL_DIR') or define('PWG_LOCAL_DIR', 'local/'); 111 111 112 include(PHPWG_ROOT_PATH . 'include/functions.inc.php'); 113 112 114 // download database config file if exists 115 check_input_parameter('dl', $_GET, false, '/^[a-f0-9]{32}$/'); 116 113 117 if (!empty($_GET['dl']) && file_exists(PHPWG_ROOT_PATH.$conf['data_location'].'pwg_'.$_GET['dl'])) 114 118 { … … 157 161 158 162 include(PHPWG_ROOT_PATH . 'include/constants.php'); 159 include(PHPWG_ROOT_PATH . 'include/functions.inc.php');160 163 include(PHPWG_ROOT_PATH . 'admin/include/functions.php'); 161 164 … … 285 288 if ( !($fp = @fopen( $config_file, 'w' ))) 286 289 { 290 // make sure nobody can list files of _data directory 291 secure_directory(PHPWG_ROOT_PATH.$conf['data_location']); 292 287 293 $tmp_filename = md5(uniqid(time())); 288 294 $fh = @fopen( PHPWG_ROOT_PATH.$conf['data_location'] . 'pwg_' . $tmp_filename, 'w' );
Note: See TracChangeset
for help on using the changeset viewer.