X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Faction-login.php;h=5e51c7f267be84507c34f9442dbe693b5c060d1e;hb=ad851a23313d8ac6489a759a0f3d62e3bc6f4682;hp=9111fbd95ea03c088543a04e011def008e385eb3;hpb=c72c89ffa5f7f5444d7fd47021db520b77738d9e;p=mailer.git diff --git a/inc/modules/admin/action-login.php b/inc/modules/admin/action-login.php index 9111fbd95e..5e51c7f267 100644 --- a/inc/modules/admin/action-login.php +++ b/inc/modules/admin/action-login.php @@ -32,17 +32,17 @@ ************************************************************************/ // Some security stuff... -if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN())) { +if ((!defined('__SECURITY')) || (!IS_ADMIN())) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; require($INC); } // Add description as navigation point -ADD_DESCR("admin", basename(__FILE__)); +ADD_DESCR("admin", __FILE__); // Load the include file -$INC = sprintf("%sinc/modules/admin/what-%s.php", PATH, $GLOBALS['what']); -if ((file_exists($INC)) && (is_readable($INC))) { +$INC = sprintf("%sinc/modules/admin/what-%s.php", PATH, SQL_ESCAPE($GLOBALS['what'])); +if (FILE_READABLE($INC)) { // Ok, we finally load the admin action module include($INC); } else {