X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fguest%2Faction-members.php;h=39edeefbffce6d03f83600a11754508a60794226;hb=b7476a95a37ec07d36bb019c4753cd29c2da2c55;hp=911c408d0ba1e314b263637e723afc97623ee0d5;hpb=d0ab0382dd73638f0bc13a1a3d6f117ec11a203e;p=mailer.git diff --git a/inc/modules/guest/action-members.php b/inc/modules/guest/action-members.php index 911c408d0b..39edeefbff 100644 --- a/inc/modules/guest/action-members.php +++ b/inc/modules/guest/action-members.php @@ -32,25 +32,27 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) -{ +if (!defined('__SECURITY')) { $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; require($INC); +} elseif ($BLOCK_MODE) { + // Block mode detected + return; } // Add description as navigation point -ADD_DESCR("guest", basename(__FILE__)); +ADD_DESCR("guest", __FILE__); // Load the include file -$INC = sprintf(PATH."inc/modules/guest/what-%s.php", $GLOBALS['what']); -if (file_exists($INC)) -{ +$INC = sprintf("inc/modules/guest/what-%s.php", SQL_ESCAPE($GLOBALS['what'])); +if (FILE_READABLE($INC)) { // Ok, we finally load the guest action module - include($INC); -} - else -{ - ADD_FATAL(GUEST_404_ACTION_1.$GLOBALS['what'].GUEST_404_ACTION_2); + LOAD_INC($INC); +} elseif ($IS_VALID) { + addFatalMessage(sprintf(getMessage('GUEST_404_ACTION'), SQL_ESCAPE($GLOBALS['what']))); +} else { + addFatalMessage(sprintf(getMessage('GUEST_LOCKED_ACTION'), SQL_ESCAPE($GLOBALS['what']))); } + // ?>