Project

General

Profile

« Previous | Next » 

Revision 1355

Added by FrankH almost 15 years ago

Security fixes

View differences:

details.php
29 29 
require_once(WB_PATH.'/framework/class.admin.php');
30 30 
$admin = new admin('Addons', 'templates_view',false);
31 31 

  		




  
  32
  
    
if( !$admin->checkFTAN() )


  		




  
  33
  
    
{


  		




  
  34
  
    
	$admin->print_error($MESSAGE['PAGES_NOT_SAVED'],'index.php');


  		




  
  35
  
    
	exit();


  		




  
  36
  
    
}


  		




  
  37
  
    

  		




  32
  38
  
    
// Get template name


  		




  33
  39
  
    
if(!isset($_POST['file']) OR $_POST['file'] == "") {


  		




  34
  40
  
    
	header("Location: index.php");


  		




  ......




  50
  56
  
    
$template = new Template(THEME_PATH.'/templates');


  		




  51
  57
  
    
$template->set_file('page', 'templates_details.htt');


  		




  52
  58
  
    
$template->set_block('page', 'main_block', 'main');


  		




  
  59
  
    
$template->set_var('FTAN', $admin->getFTAN());


  		




  53
  60
  
    

  		




  54
  61
  
    
// Insert values


  		




  55
  62
  
    
$result = $database->query("SELECT * FROM ".TABLE_PREFIX."addons WHERE type = 'template' AND directory = '$file'");


  		












Also available in:  Unified diff