Project

General

Profile

« Previous | Next » 

Revision 286

Added by stefan almost 19 years ago

Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.

View differences:

trunk/wb/search/search.php
23 23

  
24 24
*/
25 25

  
26
if(!defined('WB_URL')) { header('Location: index.php'); }
26
if(!defined('WB_URL')) { 
27
	header('Location: index.php');
28
	exit(0);
29
}
27 30

  
28 31
// Check if search is enabled
29 32
if(SHOW_SEARCH != true) {
trunk/wb/install/index.php
32 32

  
33 33
// Check if the page has been reloaded
34 34
if(!isset($_GET['sessions_checked']) OR $_GET['sessions_checked'] != 'true') {
35
   // Set session variable
36
   $_SESSION['session_support'] = '<font class="good">Enabled</font>';
37
   // Reload page
38
   header('Location: index.php?sessions_checked=true');
35
	// Set session variable
36
	$_SESSION['session_support'] = '<font class="good">Enabled</font>';
37
	// Reload page
38
	header('Location: index.php?sessions_checked=true');
39
	exit(0);
39 40
} else {
40 41
   // Check if session variable has been saved after reload
41 42
   if(isset($_SESSION['session_support'])) {
trunk/wb/admin/groups/save.php
1 1
<?php
2 2

  
3
// $Id: save.php,v 1.4 2005/04/02 06:25:37 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
34 34
// Check if group group_id is a valid number and doesnt equal 1
35 35
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id']) OR $_POST['group_id'] == 1) {
36 36
	header("Location: index.php");
37
	exit(0);
37 38
} else {
38 39
	$group_id = $_POST['group_id'];
39 40
}
trunk/wb/admin/groups/groups.php
32 32

  
33 33
if(!isset($_POST['action']) OR $_POST['action'] != "modify" AND $_POST['action'] != "delete") {
34 34
	header("Location: index.php");
35
	exit(0);
35 36
}
36 37

  
37 38
// Check if group group_id is a valid number and doesnt equal 1
38 39
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id']) OR $_POST['group_id'] == 1) {
39 40
	header("Location: index.php");
41
	exit(0);
40 42
}
41 43

  
42 44
if($_POST['action'] == 'modify') {
trunk/wb/admin/media/rename2.php
56 56
// Get the temp id
57 57
if(!is_numeric($admin->get_post('id'))) {
58 58
	header("Location: browse.php?dir=$directory");
59
	exit(0);
59 60
} else {
60 61
	$file_id = $admin->get_post('id');
61 62
}
trunk/wb/admin/media/browse.php
57 57
if($admin->get_get('up') == 1) {
58 58
	$parent_directory = dirname($directory);
59 59
	header("Location: browse.php?dir=$parent_directory");	
60
	exit(0);
60 61
}
61 62

  
62 63
// Workout the parent dir link
trunk/wb/admin/media/delete.php
48 48
// Get the temp id
49 49
if(!is_numeric($admin->get_get('id'))) {
50 50
	header("Location: browse.php?dir=$directory");
51
	exit(0);
51 52
} else {
52 53
	$file_id = $admin->get_get('id');
53 54
}
trunk/wb/admin/media/create.php
1 1
<?php
2 2

  
3
// $Id: create.php,v 1.10 2005/04/25 11:53:12 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
26 26
// Get dir name and target location
27 27
if(!isset($_POST['name']) OR $_POST['name'] == '') {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$name = $_POST['name'];
31 32
}
32 33
if(!isset($_POST['target']) OR $_POST['target'] == '') {
33 34
	header("Location: index.php");
35
	exit(0);
34 36
} else {
35 37
	$target = $_POST['target'];
36 38
}
trunk/wb/admin/media/upload.php
26 26
// Target location
27 27
if(!isset($_POST['target']) OR $_POST['target'] == '') {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$target = $_POST['target'];
31 32
}
trunk/wb/admin/media/rename.php
47 47
// Get the temp id
48 48
if(!is_numeric($admin->get_get('id'))) {
49 49
	header("Location: browse.php?dir=$directory");
50
	exit(0);
50 51
} else {
51 52
	$file_id = $admin->get_get('id');
52 53
}
trunk/wb/admin/templates/uninstall.php
26 26
// Check if user selected template
27 27
if(!isset($_POST['file']) OR $_POST['file'] == "") {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$file = $_POST['file'];
31 32
}
......
33 34
// Extra protection
34 35
if(trim($file) == '') {
35 36
	header("Location: index.php");
37
	exit(0);
36 38
}
37 39

  
38 40
// Setup admin object
trunk/wb/admin/templates/details.php
29 29
// Get template name
30 30
if(!isset($_POST['file']) OR $_POST['file'] == "") {
31 31
	header("Location: index.php");
32
	exit(0);
32 33
} else {
33 34
	$file = $_POST['file'];
34 35
}
......
36 37
// Check if the template exists
37 38
if(!file_exists(WB_PATH.'/templates/'.$file)) {
38 39
	header("Location: index.php");
40
	exit(0);
39 41
}
40 42

  
41 43
// Print admin header
trunk/wb/admin/templates/install.php
26 26
// Check if user uploaded a file
27 27
if(!isset($_FILES['userfile'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
}
30 31

  
31 32
// Setup admin object
trunk/wb/admin/pages/move_down.php
1 1
<?php
2 2

  
3
// $Id: move_down.php,v 1.2 2005/04/02 06:25:37 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
41 41
	}
42 42
} else {
43 43
	header("Location: index.php");
44
	exit(0);
44 45
}
45 46

  
46 47
// Create new admin object and print admin header
trunk/wb/admin/pages/save.php
1 1
<?php
2 2

  
3
// $Id: save.php,v 1.2 2005/04/02 06:25:37 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
26 26
// Get page & section id
27 27
if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$page_id = $_POST['page_id'];
31 32
}
32 33
if(!isset($_POST['section_id']) OR !is_numeric($_POST['section_id'])) {
33 34
	header("Location: index.php");
35
	exit(0);
34 36
} else {
35 37
	$section_id = $_POST['section_id'];
36 38
}
trunk/wb/admin/pages/settings.php
24 24
// Get page id
25 25
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
26 26
	header("Location: index.php");
27
	exit(0);
27 28
} else {
28 29
	$page_id = $_GET['page_id'];
29 30
}
trunk/wb/admin/pages/delete.php
26 26
// Get page id
27 27
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$page_id = $_GET['page_id'];
31 32
}
trunk/wb/admin/pages/sections_save.php
29 29
// Make sure people are allowed to access this page
30 30
if(MANAGE_SECTIONS != 'enabled') {
31 31
	header('Location: '.ADMIN_URL.'/pages/index.php');
32
	exit(0);
32 33
}
33 34

  
34 35
// Get page id
35 36
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
36 37
	header("Location: index.php");
38
	exit(0);
37 39
} else {
38 40
	$page_id = $_GET['page_id'];
39 41
}
trunk/wb/admin/pages/move_up.php
1 1
<?php
2 2

  
3
// $Id: move_up.php,v 1.2 2005/04/02 06:25:37 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
41 41
	}
42 42
} else {
43 43
	header("Location: index.php");
44
	exit(0);
44 45
}
45 46

  
46 47
// Create new admin object and print admin header
trunk/wb/admin/pages/intro2.php
26 26
// Get posted content
27 27
if(!isset($_POST['content'])) {
28 28
	header("Location: intro.php");
29
	exit(0);
29 30
} else {
30 31
	$content = $_POST['content'];
31 32
}
trunk/wb/admin/pages/settings2.php
26 26
// Get page id
27 27
if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$page_id = $_POST['page_id'];
31 32
}
trunk/wb/admin/pages/restore.php
26 26
// Get page id
27 27
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$page_id = $_GET['page_id'];
31 32
}
trunk/wb/admin/pages/sections.php
27 27
// Make sure people are allowed to access this page
28 28
if(MANAGE_SECTIONS != 'enabled') {
29 29
	header('Location: '.ADMIN_URL.'/pages/index.php');
30
	exit(0);
30 31
}
31 32

  
32 33
// Get page id
33 34
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
34 35
	header("Location: index.php");
36
	exit(0);
35 37
} else {
36 38
	$page_id = $_GET['page_id'];
37 39
}
trunk/wb/admin/pages/modify.php
26 26
// Get page id
27 27
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$page_id = $_GET['page_id'];
31 32
}
trunk/wb/admin/interface/time_formats.php
33 33

  
34 34
if(!defined('WB_URL')) {
35 35
	header('Location: ../index.php');
36
	exit(0);
36 37
}
37 38

  
38 39
// Define that this file is loaded
trunk/wb/admin/interface/charsets.php
33 33

  
34 34
if(!defined('WB_URL')) {
35 35
	header('Location: ../index.php');
36
	exit(0);
36 37
}
37 38

  
38 39
// Create array
trunk/wb/admin/interface/timezones.php
33 33

  
34 34
if(!defined('WB_URL')) {
35 35
	header('Location: ../index.php');
36
	exit(0);
36 37
}
37 38

  
38 39
// Create array
trunk/wb/admin/interface/er_levels.php
34 34

  
35 35
if(!defined('WB_URL')) {
36 36
	header('Location: ../index.php');
37
	exit(0);
37 38
}
38 39

  
39 40
// Define that this file is loaded
trunk/wb/admin/interface/version.php
33 33

  
34 34
if(!defined('WB_URL')) {
35 35
	header('Location: ../index.php');
36
	exit(0);
36 37
}
37 38

  
38 39
define('VERSION', '2.6.1');
trunk/wb/admin/interface/date_formats.php
33 33

  
34 34
if(!defined('WB_URL')) {
35 35
	header('Location: ../index.php');
36
	exit(0);
36 37
}
37 38

  
38 39
// Define that this file is loaded
trunk/wb/admin/settings/tool.php
29 29

  
30 30
if(!isset($_GET['tool'])) {
31 31
	header("Location: index.php?advanced=yes");
32
	exit(0);
32 33
}
33 34

  
34 35
// Check if tool is installed
35 36
$result = $database->query("SELECT * FROM ".TABLE_PREFIX."addons WHERE type = 'module' AND function = 'tool' AND directory = '".$_GET['tool']."'");
36 37
if($result->numRows() == 0) {
37 38
	header("Location: index.php?advanced=yes");
39
	exit(0);
38 40
}
39 41
$tool = $result->fetchRow();
40 42

  
trunk/wb/admin/users/save.php
1 1
<?php
2 2

  
3
// $Id: save.php,v 1.4 2005/04/02 06:25:53 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
34 34
// Check if user id is a valid number and doesnt equal 1
35 35
if(!isset($_POST['user_id']) OR !is_numeric($_POST['user_id']) OR $_POST['user_id'] == 1) {
36 36
	header("Location: index.php");
37
	exit(0);
37 38
} else {
38 39
	$user_id = $_POST['user_id'];
39 40
}
trunk/wb/admin/users/users.php
1 1
<?php
2 2

  
3
// $Id: users.php,v 1.4 2005/04/02 06:25:53 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
32 32

  
33 33
if(!isset($_POST['action']) OR $_POST['action'] != "modify" AND $_POST['action'] != "delete") {
34 34
	header("Location: index.php");
35
	exit(0);
35 36
}
36 37

  
37 38
// Check if user id is a valid number and doesnt equal 1
38 39
if(!isset($_POST['user_id']) OR !is_numeric($_POST['user_id']) OR $_POST['user_id'] == 1) {
39 40
	header("Location: index.php");
41
	exit(0);
40 42
}
41 43

  
42 44
if($_POST['action'] == 'modify') {
trunk/wb/admin/languages/uninstall.php
26 26
// Check if user selected language
27 27
if(!isset($_POST['code']) OR $_POST['code'] == "") {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
}
30 31

  
31 32
// Extra protection
32 33
if(trim($_POST['code']) == '') {
33 34
	header("Location: index.php");
35
	exit(0);
34 36
}
35 37

  
36 38
// Setup admin object
trunk/wb/admin/languages/details.php
29 29
// Get language name
30 30
if(!isset($_POST['code']) OR $_POST['code'] == "") {
31 31
	header("Location: index.php");
32
	exit(0);
32 33
} else {
33 34
	$code = $_POST['code'];
34 35
}
......
36 37
// Check if the language exists
37 38
if(!file_exists(WB_PATH.'/languages/'.$code.'.php')) {
38 39
	header("Location: index.php");
40
	exit(0);
39 41
}
40 42

  
41 43
// Print admin header
trunk/wb/admin/languages/install.php
26 26
// Check if user uploaded a file
27 27
if(!isset($_FILES['userfile'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
}
30 31

  
31 32
// Setup admin object
trunk/wb/admin/modules/uninstall.php
26 26
// Check if user selected module
27 27
if(!isset($_POST['file']) OR $_POST['file'] == "") {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
} else {
30 31
	$file = $_POST['file'];
31 32
}
......
33 34
// Extra protection
34 35
if(trim($file) == '') {
35 36
	header("Location: index.php");
37
	exit(0);
36 38
}
37 39

  
38 40
// Setup admin object
trunk/wb/admin/modules/details.php
29 29
// Get module name
30 30
if(!isset($_POST['file']) OR $_POST['file'] == "") {
31 31
	header("Location: index.php");
32
	exit(0);
32 33
} else {
33 34
	$file = $_POST['file'];
34 35
}
......
36 37
// Check if the module exists
37 38
if(!file_exists(WB_PATH.'/modules/'.$file)) {
38 39
	header("Location: index.php");
40
	exit(0);
39 41
}
40 42

  
41 43
// Print admin header
trunk/wb/admin/modules/install.php
26 26
// Check if user uploaded a file
27 27
if(!isset($_FILES['userfile'])) {
28 28
	header("Location: index.php");
29
	exit(0);
29 30
}
30 31

  
31 32
// Setup admin object
trunk/wb/modules/form/modify_field.php
33 33
// Get id
34 34
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) {
35 35
	header("Location: ".ADMIN_URL."/pages/index.php");
36
	exit(0);
36 37
} else {
37 38
	$field_id = $_GET['field_id'];
38 39
}
trunk/wb/modules/form/move_down.php
33 33
// Get id
34 34
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) {
35 35
	header("Location: index.php");
36
	exit(0);
36 37
} else {
37 38
	$field_id = $_GET['field_id'];
38 39
}
trunk/wb/modules/form/save_field.php
33 33
// Get id
34 34
if(!isset($_POST['field_id']) OR !is_numeric($_POST['field_id'])) {
35 35
	header("Location: ".ADMIN_URL."/pages/index.php");
36
	exit(0);
36 37
} else {
37 38
	$field_id = $_POST['field_id'];
38 39
	$field_id = $field_id;
trunk/wb/modules/form/delete_field.php
33 33
// Get id
34 34
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) {
35 35
	header("Location: ".ADMIN_URL."/pages/index.php");
36
	exit(0);
36 37
} else {
37 38
	$field_id = $_GET['field_id'];
38 39
}
trunk/wb/modules/form/move_up.php
33 33
// Get id
34 34
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) {
35 35
	header("Location: index.php");
36
	exit(0);
36 37
} else {
37 38
	$field_id = $_GET['field_id'];
38 39
}
trunk/wb/modules/form/delete_submission.php
33 33
// Get id
34 34
if(!isset($_GET['submission_id']) OR !is_numeric($_GET['submission_id'])) {
35 35
	header("Location: ".ADMIN_URL."/pages/index.php");
36
	exit(0);
36 37
} else {
37 38
	$submission_id = $_GET['submission_id'];
38 39
}
trunk/wb/modules/form/view_submission.php
33 33
// Get id
34 34
if(!isset($_GET['submission_id']) OR !is_numeric($_GET['submission_id'])) {
35 35
	header("Location: ".ADMIN_URL."/pages/index.php");
36
	exit(0);
36 37
} else {
37 38
	$submission_id = $_GET['submission_id'];
38 39
}
trunk/wb/modules/backup/backup-sql.php
27 27
$filename = $_SERVER['HTTP_HOST'].'-backup-'.gmdate('Y-m-d', mktime()+TIMEZONE).'.sql';
28 28

  
29 29
// Check if user clicked on the backup button
30
if(!isset($_POST['backup'])){ header('Location: ../'); }
30
if(!isset($_POST['backup'])){ 
31
	header('Location: ../');
32
	exit(0);
33
}
31 34

  
32 35
// Include config
33 36
require_once('../../config.php');
trunk/wb/modules/news/modify_post.php
28 28
// Get id
29 29
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$post_id = $_GET['post_id'];
33 34
}
trunk/wb/modules/news/move_down.php
29 29
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) {
30 30
	if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) {
31 31
		header("Location: index.php");
32
		exit(0);
32 33
	} else {
33 34
		$id = $_GET['group_id'];
34 35
		$id_field = 'group_id';
trunk/wb/modules/news/comment_page.php
24 24
*/
25 25

  
26 26
// Make sure page cannot be accessed directly
27
if(!defined('WB_URL')) { header('Location: ../index.php'); }
27
if(!defined('WB_URL')) { 
28
	header('Location: ../index.php');
29
	exit(0);
30
}
28 31
	
29 32
// Get comments page template details from db
30 33
$query_settings = $database->query("SELECT comments_page,use_captcha FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '".SECTION_ID."'");
31 34
if($query_settings->numRows() == 0) {
32 35
	header('Location: '.WB_URL.'/pages/');
36
	exit(0);
33 37
} else {
34 38
	$settings = $query_settings->fetchRow();
35 39
	// Print comments page
trunk/wb/modules/news/comment.php
30 30
if(!isset($_GET['id']) OR !is_numeric($_GET['id'])) {
31 31
	if(!isset($_POST['post_id']) OR !is_numeric($_POST['post_id'])) {
32 32
		header('Location: '.WB_URL.'/pages/');
33
		exit(0);
33 34
	} else {
34 35
		$post_id = $_POST['post_id'];
35 36
	}
......
45 46
$query_post = $database->query("SELECT post_id,title,section_id,page_id FROM ".TABLE_PREFIX."mod_news_posts WHERE post_id = '$post_id'");
46 47
if($query_post->numRows() == 0) {
47 48
	header('Location: '.WB_URL.'/pages/');
49
	exit(0);
48 50
} else {
49 51
	$fetch_post = $query_post->fetchRow();
50 52
	$page_id = $fetch_post['page_id'];
......
58 60
	$query_page = $database->query("SELECT parent,page_title,menu_title,keywords,description,visibility FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'");
59 61
	if($query_page->numRows() == 0) {
60 62
		header('Location: '.WB_URL.'/pages/');
63
		exit(0);
61 64
	} else {
62 65
		$page = $query_page->fetchRow();
63 66
		// Required page details
trunk/wb/modules/news/save_post.php
28 28
// Get id
29 29
if(!isset($_POST['post_id']) OR !is_numeric($_POST['post_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$id = $_POST['post_id'];
33 34
	$post_id = $id;
trunk/wb/modules/news/modify_group.php
28 28
// Get id
29 29
if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$group_id = $_GET['group_id'];
33 34
}
trunk/wb/modules/news/rss.php
29 29
	define('PAGE_ID', $page_id);
30 30
} else {
31 31
	header('Location: '.WB_URL);
32
	exit(0);
32 33
}
33 34
if(isset($_GET['group_id']) AND is_numeric($_GET['group_id'])) {
34 35
	$group_id = $_GET['group_id'];
trunk/wb/modules/news/delete_post.php
28 28
// Get id
29 29
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$post_id = $_GET['post_id'];
33 34
}
trunk/wb/modules/news/modify_comment.php
28 28
// Get id
29 29
if(!isset($_GET['comment_id']) OR !is_numeric($_GET['comment_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$comment_id = $_GET['comment_id'];
33 34
}
trunk/wb/modules/news/move_up.php
29 29
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) {
30 30
	if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) {
31 31
		header("Location: index.php");
32
		exit(0);
32 33
	} else {
33 34
		$id = $_GET['group_id'];
34 35
		$id_field = 'group_id';
trunk/wb/modules/news/save_group.php
28 28
// Get id
29 29
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$group_id = $_POST['group_id'];
33 34
}
trunk/wb/modules/news/view.php
277 277
		}
278 278
	} else {
279 279
		header('Location: '.WB_URL.'/pages/');
280
		exit(0);
280 281
	}
281 282
	
282 283
	// Print post header
trunk/wb/modules/news/delete_group.php
28 28
// Get id
29 29
if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$group_id = $_GET['group_id'];
33 34
}
trunk/wb/modules/news/save_comment.php
28 28
// Get id
29 29
if(!isset($_POST['comment_id']) OR !is_numeric($_POST['comment_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$comment_id = $_POST['comment_id'];
33 34
}
trunk/wb/modules/news/delete_comment.php
28 28
// Get id
29 29
if(!isset($_GET['comment_id']) OR !is_numeric($_GET['comment_id'])) {
30 30
	header("Location: ".ADMIN_URL."/pages/index.php");
31
	exit(0);
31 32
} else {
32 33
	$comment_id = $_GET['comment_id'];
33 34
}
......
35 36
// Get post id
36 37
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) {
37 38
	header("Location: ".ADMIN_URL."/pages/index.php");
39
	exit(0);
38 40
} else {
39 41
	$post_id = $_GET['post_id'];
40 42
}
trunk/wb/modules/news/submit_comment.php
68 68
	$query_page = $database->query("SELECT link FROM ".TABLE_PREFIX."mod_news_posts WHERE post_id = '$post_id'");
69 69
	$page = $query_page->fetchRow();
70 70
	header('Location: '.$wb->page_link($page['link']).'?id='.$post_id);
71
	
72 71
} else {
73 72
	header('Location: '.WB_URL.'/pages/');
74 73
}
trunk/wb/modules/admin.php
35 35
// Stop this file being access directly
36 36
if(!defined('WB_URL')) {
37 37
	header('Location: ../index.php');
38
	exit(0);
38 39
}
39 40

  
40 41
// Get page id
......
43 44
		if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
44 45
			if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) {
45 46
				header("Location: index.php");
47
				exit(0);
46 48
			} else {
47 49
				$page_id = $_POST['page_id'];
48 50
			}
......
67 69
		$section_id = 0;
68 70
	} else {
69 71
		header("Location: $section_required");
72
		exit(0);
70 73
	}
71 74
}
72 75

  
trunk/wb/account/login_form.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../pages/index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
if(defined('SMART_LOGIN') AND SMART_LOGIN == 'enabled') {
trunk/wb/account/forgot.php
40 40
if(!FRONTEND_LOGIN) {
41 41
	if(INTRO_PAGE) {
42 42
		header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION);
43
		exit(0);
43 44
	} else {
44 45
		header('Location: '.WB_URL.'/index'.PAGE_EXTENSION);
46
		exit(0);
45 47
	}
46 48
}
47 49

  
trunk/wb/account/preferences.php
28 28
if(!FRONTEND_LOGIN) {
29 29
	if(INTRO_PAGE) {
30 30
		header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION);
31
		exit(0);
31 32
	} else {
32 33
		header('Location: '.WB_URL.'/index'.PAGE_EXTENSION);
34
		exit(0);
33 35
	}
34 36
}
35 37

  
36 38
require_once(WB_PATH.'/framework/class.wb.php');
37 39
if (wb::is_authenticated()==false) {
38 40
	header('Location: '.WB_URL.'/account/login.php');
41
	exit(0);
39 42
}
40 43

  
41 44
// Required page details
trunk/wb/account/password.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
// Get the values entered
trunk/wb/account/forgot_form.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../pages/index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
// Create new database object
trunk/wb/account/preferences_form.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
?>
trunk/wb/account/details.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../pages/index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
// Get entered values
trunk/wb/account/signup.php
28 28
if(!is_numeric(FRONTEND_SIGNUP)) {
29 29
	if(INTRO_PAGE) {
30 30
		header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION);
31
		exit(0);
31 32
	} else {
32 33
		header('Location: '.WB_URL.'/index'.PAGE_EXTENSION);
34
		exit(0);
33 35
	}
34 36
}
35 37

  
trunk/wb/account/email.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
// Get the values entered
trunk/wb/account/signup2.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../pages/index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
require_once(WB_PATH.'/framework/class.wb.php');
trunk/wb/account/login.php
29 29
if(!FRONTEND_LOGIN) {
30 30
	if(INTRO_PAGE) {
31 31
		header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION);
32
		exit(0);
32 33
	} else {
33 34
		header('Location: '.WB_URL.'/index'.PAGE_EXTENSION);
35
		exit(0);
34 36
	}
35 37
}
36 38

  
trunk/wb/account/signup_form.php
25 25

  
26 26
if(!defined('WB_URL')) {
27 27
	header('Location: ../index.php');
28
	exit(0);
28 29
}
29 30

  
30 31
?>
trunk/wb/framework/class.admin.php
34 34

  
35 35
if(!defined('WB_URL')) {
36 36
	header('Location: ../index.php');
37
	exit(0);
37 38
}
38 39

  
39 40
require_once(WB_PATH.'/framework/class.wb.php');
......
63 64
			// First check if the user is logged-in
64 65
			if($this->is_authenticated() == false) {
65 66
				header('Location: '.ADMIN_URL.'/login/index.php');
67
				exit(0);
66 68
			}
67 69
			// Now check if they are allowed in this section
68 70
			if($this->get_permission($section_permission) == false) {
trunk/wb/framework/class.login.php
34 34
// Stop this file from being accessed directly
35 35
if(!defined('WB_URL')) {
36 36
	header('Location: ../index.php');
37
	exit(0);
37 38
}
38 39

  
39 40
define('LOGIN_CLASS_LOADED', true);
......
110 111
			if($this->authenticate()) {
111 112
				// Authentication successful
112 113
				header("Location: ".$this->url);
114
				exit(0);
113 115
			} else {
114 116
				$this->message = $MESSAGE['LOGIN']['AUTHENTICATION_FAILED'];
115 117
				$this->increase_attemps();
......
142 144
				// Authentication successful
143 145
				//echo $this->url;exit();
144 146
				header("Location: ".$this->url);
147
				exit(0);
145 148
			} else {
146 149
				$this->message = $MESSAGE['LOGIN']['AUTHENTICATION_FAILED'];
147 150
				$this->increase_attemps();
......
362 365
	// Warn user that they have had to many login attemps
363 366
	function warn() {
364 367
		header('Location: '.$this->warning_url);
368
		exit(0);
365 369
	}
366 370
	
367 371
}
trunk/wb/framework/class.order.php
35 35
// Stop this file from being accessed directly
36 36
if(!defined('WB_URL')) {
37 37
	header('Location: ../index.php');
38
	exit(0);
38 39
}
39 40

  
40 41
define('ORDERING_CLASS_LOADED', true);
trunk/wb/framework/convert.php
30 30
*/
31 31
if(!defined('WB_URL')) {
32 32
	header('Location: ../index.php');
33
	exit(0);
33 34
}
34 35

  
35 36
$conversion_array = array(
trunk/wb/framework/class.frontend.php
31 31

  
32 32
if(!defined('WB_PATH')) {
33 33
	header('Location: ../index.php');
34
	exit(0);
34 35
}
35 36

  
36 37

  
......
200 201
			if($this->is_authenticated() == false) {
201 202
				// User needs to login first
202 203
				header("Location: ".WB_URL."/account/login".PAGE_EXTENSION.'?redirect='.$this->link);
204
				exit(0);
203 205
			}
204 206
			// Check if we should show this page
205 207
			if($this->show_page($this->page) == false) {
trunk/wb/framework/frontend.functions.php
29 29
*/
30 30
if(!defined('WB_URL')) {
31 31
	header('Location: ../index.php');
32
	exit(0);
32 33
}
33 34

  
34 35
// references to objects and variables that changed their names
trunk/wb/framework/class.database.php
35 35
// Stop this file from being accessed directly
36 36
if(!defined('WB_URL')) {
37 37
	header('Location: ../index.php');
38
	exit(0);
38 39
}
39 40

  
40 41
if(!defined('DB_URL')) {
trunk/wb/framework/functions.php
33 33
// Stop this file from being accessed directly
34 34
if(!defined('WB_URL')) {
35 35
	header('Location: ../index.php');
36
	exit(0);
36 37
}
37 38

  
38 39
// Define that this file has been loaded
trunk/wb/index.php
31 31
// Check if the config file has been set-up
32 32
if(!defined('WB_PATH')) {
33 33
	header("Location: install/index.php");
34
	exit(0);
34 35
}
35 36

  
36 37
require_once(WB_PATH.'/framework/class.frontend.php');

Also available in: Unified diff