X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fguest%2Faction-admin.php;h=6b3787f03a8718fd24c553b410540e2803e67b45;hb=c81e9ed85e01215e464d94446773bcd5e6699194;hp=fce845e27a91c876aad076d7484bbe42b628d54a;hpb=61bddb167e29e7275f5a1c9fa8cb80431fa5ee6f;p=mailer.git diff --git a/inc/modules/guest/action-admin.php b/inc/modules/guest/action-admin.php index fce845e27a..6b3787f03a 100644 --- a/inc/modules/guest/action-admin.php +++ b/inc/modules/guest/action-admin.php @@ -32,25 +32,22 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) -{ +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; require($INC); +} elseif ($BLOCK_MODE) { + // Block mode detected + return; } -if (GET_ACTION("guest", $GLOBALS['what']) == "admin") -{ - // Only when one admin link is clicked... - $INC = sprintf("%sinc/modules/guest/what-%s.php", PATH, $GLOBALS['what']); - if (file_exists($INC)) - { - // Ok, we finally load the guest action module - include($INC); - } - else - { - ADD_FATAL(GUEST_404_ACTION_1.$GLOBALS['what'].GUEST_404_ACTION_2); - } +// Only when one admin link is clicked... +$INC = sprintf("inc/modules/guest/what-%s.php", SQL_ESCAPE($GLOBALS['what'])); +if (INCLUDE_READABLE($INC)) { + // Ok, we finally load the guest action module + LOAD_INC($INC); +} else { + addFatalMessage(getMessage('GUEST_404_ACTION'), $GLOBALS['what']); } + // ?>