X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=modules.php;h=da08bc735fc55e67f139b873c7f193345796a599;hb=b537cec0ec5107ef3b6cc59dc36f4a0713a27677;hp=72cd6943e0f2197d24ebd203a41ac0a52eebf8f9;hpb=51d65692668408a44920ce069a37c5fa4f5ba257;p=mailer.git

diff --git a/modules.php b/modules.php
index 72cd6943e0..da08bc735f 100644
--- a/modules.php
+++ b/modules.php
@@ -35,7 +35,7 @@
 //xdebug_start_trace();
 
 // Load security stuff here (Oh, I hope this is not unsecure? Am I paranoia??? ;-) )
-require_once ("inc/libs/security_functions.php");
+require_once("inc/libs/security_functions.php");
 
 // Init "action" and "what"
 global $what, $action, $startTime;
@@ -55,7 +55,7 @@ if (!empty($_GET['what'])) $GLOBALS['what'] = secureString($_GET['what']);
 $GLOBALS['module'] = secureString($_GET['module']);
 
 // Needed include files
-require ("inc/config.php");
+require("inc/config.php");
 
 // Check if logged in
 if (IS_MEMBER()) {
@@ -73,13 +73,20 @@ if (IS_MEMBER()) {
 			$username .= " ("._ADMIN_SHORT.")";
 		} // END - if
 	} else {
-		// Hmmm, logged in and no valid cookies???
+		// Hmmm, logged in and no valid userid?
 		$username = "<I>"._UNKNOWN."</I>";
+
+		// Destroy session
+		destroy_user_session();
+
+		// Kill userid
+		$GLOBALS['userid'] = 0;
 	}
 
 	// Free memory
 	SQL_FREERESULT($result);
 } elseif (IS_ADMIN()) {
+	// Admin is there
 	$username = _ADMIN;
 } else {
 	// He's a guest, hello there... ;-)
@@ -103,7 +110,7 @@ if ((!empty($_CONFIG['maintenance'])) && ($_CONFIG['maintenance'] == "Y") && (!I
 	case "mem_only":
 	case "done":
 		// Construct module name
-		define('__MODULE', sprintf("%sinc/modules/%s.php", PATH, $GLOBALS['module']));
+		define('__MODULE', sprintf("%sinc/modules/%s.php", PATH, SQL_ESCAPE($GLOBALS['module'])));
 
 		// Does the module exists on local file system?
 		if ((FILE_READABLE(__MODULE)) && (sizeof($FATAL) == 0)) {
@@ -122,21 +129,21 @@ if ((!empty($_CONFIG['maintenance'])) && ($_CONFIG['maintenance'] == "Y") && (!I
 		break;
 
 	case "locked":
-		if (!FILE_READABLE(PATH."inc/modules/".$GLOBALS['module'].".php"))
-		{
+		if (!FILE_READABLE(PATH."inc/modules/".$GLOBALS['module'].".php")) {
 			// Module does addionally not exists
 			ADD_FATAL(LANG_MOD_REG_404_1.$GLOBALS['module'].LANG_MOD_REG_404_2);
-		}
+		} // END - if
+
+		// Add fatal message
 		ADD_FATAL(LANG_MOD_LOCKED_1.$GLOBALS['module'].LANG_MOD_LOCKED_2);
 		break;
 
 	default:
+		DEBUG_LOG(__FILE__, __LINE__, sprintf("Unknown status %s return from module check. Module=%s", $check, $GLOBALS['module']));
 		ADD_FATAL(LANG_MOD_UNKNOWN_1.$check.LANG_MOD_UNKNOWN_2);
 		break;
 	}
-}
- elseif (sizeof($FATAL) == 0)
-{
+} elseif (sizeof($FATAL) == 0) {
 	// MySQL problems!
 	ADD_FATAL(MYSQL_ERRORS);
 }
@@ -148,7 +155,7 @@ if ($MOD_VALID) {
 	//
 	// Everything is okay so we can load the module
 	include (__MODULE);
-}
+} // END - if
 
 // Next-to-end add the footer
 include (PATH."inc/footer.php");