deny access to include files

darcs-hash:20080514190009-84dde-30f0f1b5955d71cd85563e12078ab02bf8645524.gz

diff --git a/TODO b/TODO
index 7cc39f845926f3042c8389b55109a67eb8dadf2c..8b3fe5b75f695216aa7aef4cd8355aea902740eb 100644 (file)
--- a/TODO
+++ b/TODO
@@ -13,7 +13,8 @@
 + subscribe links on profile
 + header menu
 + footer menu
-- disallow direct to PHP files
++ disallow direct to PHP files
+- require valid nicknames
 - common_local_url()
 - configuration system ($config)
 - RSS 1.0 feeds of a user's notices

diff --git a/action.php b/action.php
index 539077bc3fece06d0d861f3b5047022e3113ebec..ed25ac9d82c66c153e8111ca349973c3ed189efd 100644 (file)
--- a/action.php
+++ b/action.php
@@ -1,5 +1,7 @@
 <?php
 
+if (!defined('MICROBLOG')) { exit(1) }
+
 class Action { // lawsuit
 
        var $args;

diff --git a/actions/settings.php b/actions/settings.php
index 826770ad7ba2e01cab7bb9c01d32a44fd48e25b7..b2106ec396f391b4d6f780ab239d87e5826b6d33 100644 (file)
--- a/actions/settings.php
+++ b/actions/settings.php
@@ -31,4 +31,3 @@ class SettingsAction extends Action {
                } else {
                        $this->show_form();
                }
-                               
\ No newline at end of file

diff --git a/classes/Notice.php b/classes/Notice.php
index f990675fba02359ee1dbf90177ded341ad2a759d..a25afce2b975d7bf53e31a8f9f05d10b0c36113b 100644 (file)
--- a/classes/Notice.php
+++ b/classes/Notice.php
@@ -1,4 +1,7 @@
 <?php
+
+if (!defined('MICROBLOG')) { exit(1) }
+
 /**
  * Table Definition for notice
  */

diff --git a/classes/Profile.php b/classes/Profile.php
index be4708a5571e24182412792dad007f848f5e5eaf..d6535238ac9e9dd470e3cd80ba96b4e6d41ec4c9 100644 (file)
--- a/classes/Profile.php
+++ b/classes/Profile.php
@@ -1,4 +1,5 @@
 <?php
+if (!defined('MICROBLOG')) { exit(1) }
 /**
  * Table Definition for profile
  */

diff --git a/classes/Remote_profile.php b/classes/Remote_profile.php
index 6914bc2fbd5d998bea5721b435112d7d5052b548..dde2b39aa34287c9d8e50835001eb4e88e7aab2e 100644 (file)
--- a/classes/Remote_profile.php
+++ b/classes/Remote_profile.php
@@ -1,4 +1,5 @@
 <?php
+if (!defined('MICROBLOG')) { exit(1) }
 /**
  * Table Definition for remote_profile
  */

diff --git a/classes/Subscription.php b/classes/Subscription.php
index 93b46b6f880e5940ca5e621f09a252ba4b30cf1b..7d1881a3213f562eba4981e4554d24c86c9e02fc 100644 (file)
--- a/classes/Subscription.php
+++ b/classes/Subscription.php
@@ -1,4 +1,5 @@
 <?php
+if (!defined('MICROBLOG')) { exit(1) }
 /**
  * Table Definition for subscription
  */

diff --git a/classes/User.php b/classes/User.php
index 8234e07848cf2e462b88bedc6dc8624665f74ff5..76f7da989f0eac0cf9b7a2ff133ad187eed5c8c6 100644 (file)
--- a/classes/User.php
+++ b/classes/User.php
@@ -1,4 +1,5 @@
 <?php
+if (!defined('MICROBLOG')) { exit(1) }
 /**
  * Table Definition for user
  */

diff --git a/common.php b/common.php
index 3a5278e494cf22fd76c1b03c96a12eca7952b1cd..973b1c6e6c59cea6b75f6dba9a916d0745cc95a5 100644 (file)
--- a/common.php
+++ b/common.php
@@ -1,5 +1,7 @@
 <?php
 
+if (!defined('MICROBLOG')) { exit(1) }
+
 # global configuration object
 
 // default configuration, overwritten in config.php

diff --git a/config.php b/config.php
index c178baf9c9962bf9d844d6a040fd0dc3c30f2a40..cd00072a6f7e8b03993915a219ed770a44a8b706 100644 (file)
--- a/config.php
+++ b/config.php
@@ -1,5 +1,7 @@
 <?php
 
+if (!defined('MICROBLOG')) { exit(1) }
+
 $dsn = array(
                             'phptype'  => 'pgsql',
                             'username' => 'someuser',

diff --git a/index.php b/index.php
index 7237c08bc00f0527baba544d45e188fd8b9e36a4..ee17b73d0a66c4867c60afd9ed3ad7ef39e1f46d 100644 (file)
--- a/index.php
+++ b/index.php
@@ -1,6 +1,7 @@
 <?php
 
 define('INSTALLDIR', dirname(__FILE__));
+define('MICROBLOG', true);
 
 require_once(INSTALLDIR . "/common.php");
 

diff --git a/stream.php b/stream.php
index d30ee013c43f2f101c1dd560ddfec0454f860ea6..9f972d75e4bf69c8e31bf2bbfe501fd2e2b683a6 100644 (file)
--- a/stream.php
+++ b/stream.php
@@ -1,5 +1,7 @@
 <?php
 
+if (!defined('MICROBLOG')) { exit(1) }
+
 define('NOTICES_PER_PAGE', 20);
 
 class StreamAction extends Action {