Revision 286
Added by stefan almost 19 years ago
trunk/wb/search/search.php | ||
---|---|---|
23 | 23 |
|
24 | 24 |
*/ |
25 | 25 |
|
26 |
if(!defined('WB_URL')) { header('Location: index.php'); } |
|
26 |
if(!defined('WB_URL')) { |
|
27 |
header('Location: index.php'); |
|
28 |
exit(0); |
|
29 |
} |
|
27 | 30 |
|
28 | 31 |
// Check if search is enabled |
29 | 32 |
if(SHOW_SEARCH != true) { |
trunk/wb/install/index.php | ||
---|---|---|
32 | 32 |
|
33 | 33 |
// Check if the page has been reloaded |
34 | 34 |
if(!isset($_GET['sessions_checked']) OR $_GET['sessions_checked'] != 'true') { |
35 |
// Set session variable |
|
36 |
$_SESSION['session_support'] = '<font class="good">Enabled</font>'; |
|
37 |
// Reload page |
|
38 |
header('Location: index.php?sessions_checked=true'); |
|
35 |
// Set session variable |
|
36 |
$_SESSION['session_support'] = '<font class="good">Enabled</font>'; |
|
37 |
// Reload page |
|
38 |
header('Location: index.php?sessions_checked=true'); |
|
39 |
exit(0); |
|
39 | 40 |
} else { |
40 | 41 |
// Check if session variable has been saved after reload |
41 | 42 |
if(isset($_SESSION['session_support'])) { |
trunk/wb/admin/groups/save.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: save.php,v 1.4 2005/04/02 06:25:37 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
34 | 34 |
// Check if group group_id is a valid number and doesnt equal 1 |
35 | 35 |
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id']) OR $_POST['group_id'] == 1) { |
36 | 36 |
header("Location: index.php"); |
37 |
exit(0); |
|
37 | 38 |
} else { |
38 | 39 |
$group_id = $_POST['group_id']; |
39 | 40 |
} |
trunk/wb/admin/groups/groups.php | ||
---|---|---|
32 | 32 |
|
33 | 33 |
if(!isset($_POST['action']) OR $_POST['action'] != "modify" AND $_POST['action'] != "delete") { |
34 | 34 |
header("Location: index.php"); |
35 |
exit(0); |
|
35 | 36 |
} |
36 | 37 |
|
37 | 38 |
// Check if group group_id is a valid number and doesnt equal 1 |
38 | 39 |
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id']) OR $_POST['group_id'] == 1) { |
39 | 40 |
header("Location: index.php"); |
41 |
exit(0); |
|
40 | 42 |
} |
41 | 43 |
|
42 | 44 |
if($_POST['action'] == 'modify') { |
trunk/wb/admin/media/rename2.php | ||
---|---|---|
56 | 56 |
// Get the temp id |
57 | 57 |
if(!is_numeric($admin->get_post('id'))) { |
58 | 58 |
header("Location: browse.php?dir=$directory"); |
59 |
exit(0); |
|
59 | 60 |
} else { |
60 | 61 |
$file_id = $admin->get_post('id'); |
61 | 62 |
} |
trunk/wb/admin/media/browse.php | ||
---|---|---|
57 | 57 |
if($admin->get_get('up') == 1) { |
58 | 58 |
$parent_directory = dirname($directory); |
59 | 59 |
header("Location: browse.php?dir=$parent_directory"); |
60 |
exit(0); |
|
60 | 61 |
} |
61 | 62 |
|
62 | 63 |
// Workout the parent dir link |
trunk/wb/admin/media/delete.php | ||
---|---|---|
48 | 48 |
// Get the temp id |
49 | 49 |
if(!is_numeric($admin->get_get('id'))) { |
50 | 50 |
header("Location: browse.php?dir=$directory"); |
51 |
exit(0); |
|
51 | 52 |
} else { |
52 | 53 |
$file_id = $admin->get_get('id'); |
53 | 54 |
} |
trunk/wb/admin/media/create.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: create.php,v 1.10 2005/04/25 11:53:12 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
26 | 26 |
// Get dir name and target location |
27 | 27 |
if(!isset($_POST['name']) OR $_POST['name'] == '') { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$name = $_POST['name']; |
31 | 32 |
} |
32 | 33 |
if(!isset($_POST['target']) OR $_POST['target'] == '') { |
33 | 34 |
header("Location: index.php"); |
35 |
exit(0); |
|
34 | 36 |
} else { |
35 | 37 |
$target = $_POST['target']; |
36 | 38 |
} |
trunk/wb/admin/media/upload.php | ||
---|---|---|
26 | 26 |
// Target location |
27 | 27 |
if(!isset($_POST['target']) OR $_POST['target'] == '') { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$target = $_POST['target']; |
31 | 32 |
} |
trunk/wb/admin/media/rename.php | ||
---|---|---|
47 | 47 |
// Get the temp id |
48 | 48 |
if(!is_numeric($admin->get_get('id'))) { |
49 | 49 |
header("Location: browse.php?dir=$directory"); |
50 |
exit(0); |
|
50 | 51 |
} else { |
51 | 52 |
$file_id = $admin->get_get('id'); |
52 | 53 |
} |
trunk/wb/admin/templates/uninstall.php | ||
---|---|---|
26 | 26 |
// Check if user selected template |
27 | 27 |
if(!isset($_POST['file']) OR $_POST['file'] == "") { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$file = $_POST['file']; |
31 | 32 |
} |
... | ... | |
33 | 34 |
// Extra protection |
34 | 35 |
if(trim($file) == '') { |
35 | 36 |
header("Location: index.php"); |
37 |
exit(0); |
|
36 | 38 |
} |
37 | 39 |
|
38 | 40 |
// Setup admin object |
trunk/wb/admin/templates/details.php | ||
---|---|---|
29 | 29 |
// Get template name |
30 | 30 |
if(!isset($_POST['file']) OR $_POST['file'] == "") { |
31 | 31 |
header("Location: index.php"); |
32 |
exit(0); |
|
32 | 33 |
} else { |
33 | 34 |
$file = $_POST['file']; |
34 | 35 |
} |
... | ... | |
36 | 37 |
// Check if the template exists |
37 | 38 |
if(!file_exists(WB_PATH.'/templates/'.$file)) { |
38 | 39 |
header("Location: index.php"); |
40 |
exit(0); |
|
39 | 41 |
} |
40 | 42 |
|
41 | 43 |
// Print admin header |
trunk/wb/admin/templates/install.php | ||
---|---|---|
26 | 26 |
// Check if user uploaded a file |
27 | 27 |
if(!isset($_FILES['userfile'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} |
30 | 31 |
|
31 | 32 |
// Setup admin object |
trunk/wb/admin/pages/move_down.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: move_down.php,v 1.2 2005/04/02 06:25:37 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
41 | 41 |
} |
42 | 42 |
} else { |
43 | 43 |
header("Location: index.php"); |
44 |
exit(0); |
|
44 | 45 |
} |
45 | 46 |
|
46 | 47 |
// Create new admin object and print admin header |
trunk/wb/admin/pages/save.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: save.php,v 1.2 2005/04/02 06:25:37 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
26 | 26 |
// Get page & section id |
27 | 27 |
if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$page_id = $_POST['page_id']; |
31 | 32 |
} |
32 | 33 |
if(!isset($_POST['section_id']) OR !is_numeric($_POST['section_id'])) { |
33 | 34 |
header("Location: index.php"); |
35 |
exit(0); |
|
34 | 36 |
} else { |
35 | 37 |
$section_id = $_POST['section_id']; |
36 | 38 |
} |
trunk/wb/admin/pages/settings.php | ||
---|---|---|
24 | 24 |
// Get page id |
25 | 25 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
26 | 26 |
header("Location: index.php"); |
27 |
exit(0); |
|
27 | 28 |
} else { |
28 | 29 |
$page_id = $_GET['page_id']; |
29 | 30 |
} |
trunk/wb/admin/pages/delete.php | ||
---|---|---|
26 | 26 |
// Get page id |
27 | 27 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$page_id = $_GET['page_id']; |
31 | 32 |
} |
trunk/wb/admin/pages/sections_save.php | ||
---|---|---|
29 | 29 |
// Make sure people are allowed to access this page |
30 | 30 |
if(MANAGE_SECTIONS != 'enabled') { |
31 | 31 |
header('Location: '.ADMIN_URL.'/pages/index.php'); |
32 |
exit(0); |
|
32 | 33 |
} |
33 | 34 |
|
34 | 35 |
// Get page id |
35 | 36 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
36 | 37 |
header("Location: index.php"); |
38 |
exit(0); |
|
37 | 39 |
} else { |
38 | 40 |
$page_id = $_GET['page_id']; |
39 | 41 |
} |
trunk/wb/admin/pages/move_up.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: move_up.php,v 1.2 2005/04/02 06:25:37 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
41 | 41 |
} |
42 | 42 |
} else { |
43 | 43 |
header("Location: index.php"); |
44 |
exit(0); |
|
44 | 45 |
} |
45 | 46 |
|
46 | 47 |
// Create new admin object and print admin header |
trunk/wb/admin/pages/intro2.php | ||
---|---|---|
26 | 26 |
// Get posted content |
27 | 27 |
if(!isset($_POST['content'])) { |
28 | 28 |
header("Location: intro.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$content = $_POST['content']; |
31 | 32 |
} |
trunk/wb/admin/pages/settings2.php | ||
---|---|---|
26 | 26 |
// Get page id |
27 | 27 |
if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$page_id = $_POST['page_id']; |
31 | 32 |
} |
trunk/wb/admin/pages/restore.php | ||
---|---|---|
26 | 26 |
// Get page id |
27 | 27 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$page_id = $_GET['page_id']; |
31 | 32 |
} |
trunk/wb/admin/pages/sections.php | ||
---|---|---|
27 | 27 |
// Make sure people are allowed to access this page |
28 | 28 |
if(MANAGE_SECTIONS != 'enabled') { |
29 | 29 |
header('Location: '.ADMIN_URL.'/pages/index.php'); |
30 |
exit(0); |
|
30 | 31 |
} |
31 | 32 |
|
32 | 33 |
// Get page id |
33 | 34 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
34 | 35 |
header("Location: index.php"); |
36 |
exit(0); |
|
35 | 37 |
} else { |
36 | 38 |
$page_id = $_GET['page_id']; |
37 | 39 |
} |
trunk/wb/admin/pages/modify.php | ||
---|---|---|
26 | 26 |
// Get page id |
27 | 27 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$page_id = $_GET['page_id']; |
31 | 32 |
} |
trunk/wb/admin/interface/time_formats.php | ||
---|---|---|
33 | 33 |
|
34 | 34 |
if(!defined('WB_URL')) { |
35 | 35 |
header('Location: ../index.php'); |
36 |
exit(0); |
|
36 | 37 |
} |
37 | 38 |
|
38 | 39 |
// Define that this file is loaded |
trunk/wb/admin/interface/charsets.php | ||
---|---|---|
33 | 33 |
|
34 | 34 |
if(!defined('WB_URL')) { |
35 | 35 |
header('Location: ../index.php'); |
36 |
exit(0); |
|
36 | 37 |
} |
37 | 38 |
|
38 | 39 |
// Create array |
trunk/wb/admin/interface/timezones.php | ||
---|---|---|
33 | 33 |
|
34 | 34 |
if(!defined('WB_URL')) { |
35 | 35 |
header('Location: ../index.php'); |
36 |
exit(0); |
|
36 | 37 |
} |
37 | 38 |
|
38 | 39 |
// Create array |
trunk/wb/admin/interface/er_levels.php | ||
---|---|---|
34 | 34 |
|
35 | 35 |
if(!defined('WB_URL')) { |
36 | 36 |
header('Location: ../index.php'); |
37 |
exit(0); |
|
37 | 38 |
} |
38 | 39 |
|
39 | 40 |
// Define that this file is loaded |
trunk/wb/admin/interface/version.php | ||
---|---|---|
33 | 33 |
|
34 | 34 |
if(!defined('WB_URL')) { |
35 | 35 |
header('Location: ../index.php'); |
36 |
exit(0); |
|
36 | 37 |
} |
37 | 38 |
|
38 | 39 |
define('VERSION', '2.6.1'); |
trunk/wb/admin/interface/date_formats.php | ||
---|---|---|
33 | 33 |
|
34 | 34 |
if(!defined('WB_URL')) { |
35 | 35 |
header('Location: ../index.php'); |
36 |
exit(0); |
|
36 | 37 |
} |
37 | 38 |
|
38 | 39 |
// Define that this file is loaded |
trunk/wb/admin/settings/tool.php | ||
---|---|---|
29 | 29 |
|
30 | 30 |
if(!isset($_GET['tool'])) { |
31 | 31 |
header("Location: index.php?advanced=yes"); |
32 |
exit(0); |
|
32 | 33 |
} |
33 | 34 |
|
34 | 35 |
// Check if tool is installed |
35 | 36 |
$result = $database->query("SELECT * FROM ".TABLE_PREFIX."addons WHERE type = 'module' AND function = 'tool' AND directory = '".$_GET['tool']."'"); |
36 | 37 |
if($result->numRows() == 0) { |
37 | 38 |
header("Location: index.php?advanced=yes"); |
39 |
exit(0); |
|
38 | 40 |
} |
39 | 41 |
$tool = $result->fetchRow(); |
40 | 42 |
|
trunk/wb/admin/users/save.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: save.php,v 1.4 2005/04/02 06:25:53 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
34 | 34 |
// Check if user id is a valid number and doesnt equal 1 |
35 | 35 |
if(!isset($_POST['user_id']) OR !is_numeric($_POST['user_id']) OR $_POST['user_id'] == 1) { |
36 | 36 |
header("Location: index.php"); |
37 |
exit(0); |
|
37 | 38 |
} else { |
38 | 39 |
$user_id = $_POST['user_id']; |
39 | 40 |
} |
trunk/wb/admin/users/users.php | ||
---|---|---|
1 | 1 |
<?php |
2 | 2 |
|
3 |
// $Id: users.php,v 1.4 2005/04/02 06:25:53 rdjurovich Exp $
|
|
3 |
// $Id$ |
|
4 | 4 |
|
5 | 5 |
/* |
6 | 6 |
|
... | ... | |
32 | 32 |
|
33 | 33 |
if(!isset($_POST['action']) OR $_POST['action'] != "modify" AND $_POST['action'] != "delete") { |
34 | 34 |
header("Location: index.php"); |
35 |
exit(0); |
|
35 | 36 |
} |
36 | 37 |
|
37 | 38 |
// Check if user id is a valid number and doesnt equal 1 |
38 | 39 |
if(!isset($_POST['user_id']) OR !is_numeric($_POST['user_id']) OR $_POST['user_id'] == 1) { |
39 | 40 |
header("Location: index.php"); |
41 |
exit(0); |
|
40 | 42 |
} |
41 | 43 |
|
42 | 44 |
if($_POST['action'] == 'modify') { |
trunk/wb/admin/languages/uninstall.php | ||
---|---|---|
26 | 26 |
// Check if user selected language |
27 | 27 |
if(!isset($_POST['code']) OR $_POST['code'] == "") { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} |
30 | 31 |
|
31 | 32 |
// Extra protection |
32 | 33 |
if(trim($_POST['code']) == '') { |
33 | 34 |
header("Location: index.php"); |
35 |
exit(0); |
|
34 | 36 |
} |
35 | 37 |
|
36 | 38 |
// Setup admin object |
trunk/wb/admin/languages/details.php | ||
---|---|---|
29 | 29 |
// Get language name |
30 | 30 |
if(!isset($_POST['code']) OR $_POST['code'] == "") { |
31 | 31 |
header("Location: index.php"); |
32 |
exit(0); |
|
32 | 33 |
} else { |
33 | 34 |
$code = $_POST['code']; |
34 | 35 |
} |
... | ... | |
36 | 37 |
// Check if the language exists |
37 | 38 |
if(!file_exists(WB_PATH.'/languages/'.$code.'.php')) { |
38 | 39 |
header("Location: index.php"); |
40 |
exit(0); |
|
39 | 41 |
} |
40 | 42 |
|
41 | 43 |
// Print admin header |
trunk/wb/admin/languages/install.php | ||
---|---|---|
26 | 26 |
// Check if user uploaded a file |
27 | 27 |
if(!isset($_FILES['userfile'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} |
30 | 31 |
|
31 | 32 |
// Setup admin object |
trunk/wb/admin/modules/uninstall.php | ||
---|---|---|
26 | 26 |
// Check if user selected module |
27 | 27 |
if(!isset($_POST['file']) OR $_POST['file'] == "") { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} else { |
30 | 31 |
$file = $_POST['file']; |
31 | 32 |
} |
... | ... | |
33 | 34 |
// Extra protection |
34 | 35 |
if(trim($file) == '') { |
35 | 36 |
header("Location: index.php"); |
37 |
exit(0); |
|
36 | 38 |
} |
37 | 39 |
|
38 | 40 |
// Setup admin object |
trunk/wb/admin/modules/details.php | ||
---|---|---|
29 | 29 |
// Get module name |
30 | 30 |
if(!isset($_POST['file']) OR $_POST['file'] == "") { |
31 | 31 |
header("Location: index.php"); |
32 |
exit(0); |
|
32 | 33 |
} else { |
33 | 34 |
$file = $_POST['file']; |
34 | 35 |
} |
... | ... | |
36 | 37 |
// Check if the module exists |
37 | 38 |
if(!file_exists(WB_PATH.'/modules/'.$file)) { |
38 | 39 |
header("Location: index.php"); |
40 |
exit(0); |
|
39 | 41 |
} |
40 | 42 |
|
41 | 43 |
// Print admin header |
trunk/wb/admin/modules/install.php | ||
---|---|---|
26 | 26 |
// Check if user uploaded a file |
27 | 27 |
if(!isset($_FILES['userfile'])) { |
28 | 28 |
header("Location: index.php"); |
29 |
exit(0); |
|
29 | 30 |
} |
30 | 31 |
|
31 | 32 |
// Setup admin object |
trunk/wb/modules/form/modify_field.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) { |
35 | 35 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$field_id = $_GET['field_id']; |
38 | 39 |
} |
trunk/wb/modules/form/move_down.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) { |
35 | 35 |
header("Location: index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$field_id = $_GET['field_id']; |
38 | 39 |
} |
trunk/wb/modules/form/save_field.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_POST['field_id']) OR !is_numeric($_POST['field_id'])) { |
35 | 35 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$field_id = $_POST['field_id']; |
38 | 39 |
$field_id = $field_id; |
trunk/wb/modules/form/delete_field.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) { |
35 | 35 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$field_id = $_GET['field_id']; |
38 | 39 |
} |
trunk/wb/modules/form/move_up.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_GET['field_id']) OR !is_numeric($_GET['field_id'])) { |
35 | 35 |
header("Location: index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$field_id = $_GET['field_id']; |
38 | 39 |
} |
trunk/wb/modules/form/delete_submission.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_GET['submission_id']) OR !is_numeric($_GET['submission_id'])) { |
35 | 35 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$submission_id = $_GET['submission_id']; |
38 | 39 |
} |
trunk/wb/modules/form/view_submission.php | ||
---|---|---|
33 | 33 |
// Get id |
34 | 34 |
if(!isset($_GET['submission_id']) OR !is_numeric($_GET['submission_id'])) { |
35 | 35 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
36 |
exit(0); |
|
36 | 37 |
} else { |
37 | 38 |
$submission_id = $_GET['submission_id']; |
38 | 39 |
} |
trunk/wb/modules/backup/backup-sql.php | ||
---|---|---|
27 | 27 |
$filename = $_SERVER['HTTP_HOST'].'-backup-'.gmdate('Y-m-d', mktime()+TIMEZONE).'.sql'; |
28 | 28 |
|
29 | 29 |
// Check if user clicked on the backup button |
30 |
if(!isset($_POST['backup'])){ header('Location: ../'); } |
|
30 |
if(!isset($_POST['backup'])){ |
|
31 |
header('Location: ../'); |
|
32 |
exit(0); |
|
33 |
} |
|
31 | 34 |
|
32 | 35 |
// Include config |
33 | 36 |
require_once('../../config.php'); |
trunk/wb/modules/news/modify_post.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$post_id = $_GET['post_id']; |
33 | 34 |
} |
trunk/wb/modules/news/move_down.php | ||
---|---|---|
29 | 29 |
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) { |
30 | 30 |
if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) { |
31 | 31 |
header("Location: index.php"); |
32 |
exit(0); |
|
32 | 33 |
} else { |
33 | 34 |
$id = $_GET['group_id']; |
34 | 35 |
$id_field = 'group_id'; |
trunk/wb/modules/news/comment_page.php | ||
---|---|---|
24 | 24 |
*/ |
25 | 25 |
|
26 | 26 |
// Make sure page cannot be accessed directly |
27 |
if(!defined('WB_URL')) { header('Location: ../index.php'); } |
|
27 |
if(!defined('WB_URL')) { |
|
28 |
header('Location: ../index.php'); |
|
29 |
exit(0); |
|
30 |
} |
|
28 | 31 |
|
29 | 32 |
// Get comments page template details from db |
30 | 33 |
$query_settings = $database->query("SELECT comments_page,use_captcha FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '".SECTION_ID."'"); |
31 | 34 |
if($query_settings->numRows() == 0) { |
32 | 35 |
header('Location: '.WB_URL.'/pages/'); |
36 |
exit(0); |
|
33 | 37 |
} else { |
34 | 38 |
$settings = $query_settings->fetchRow(); |
35 | 39 |
// Print comments page |
trunk/wb/modules/news/comment.php | ||
---|---|---|
30 | 30 |
if(!isset($_GET['id']) OR !is_numeric($_GET['id'])) { |
31 | 31 |
if(!isset($_POST['post_id']) OR !is_numeric($_POST['post_id'])) { |
32 | 32 |
header('Location: '.WB_URL.'/pages/'); |
33 |
exit(0); |
|
33 | 34 |
} else { |
34 | 35 |
$post_id = $_POST['post_id']; |
35 | 36 |
} |
... | ... | |
45 | 46 |
$query_post = $database->query("SELECT post_id,title,section_id,page_id FROM ".TABLE_PREFIX."mod_news_posts WHERE post_id = '$post_id'"); |
46 | 47 |
if($query_post->numRows() == 0) { |
47 | 48 |
header('Location: '.WB_URL.'/pages/'); |
49 |
exit(0); |
|
48 | 50 |
} else { |
49 | 51 |
$fetch_post = $query_post->fetchRow(); |
50 | 52 |
$page_id = $fetch_post['page_id']; |
... | ... | |
58 | 60 |
$query_page = $database->query("SELECT parent,page_title,menu_title,keywords,description,visibility FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'"); |
59 | 61 |
if($query_page->numRows() == 0) { |
60 | 62 |
header('Location: '.WB_URL.'/pages/'); |
63 |
exit(0); |
|
61 | 64 |
} else { |
62 | 65 |
$page = $query_page->fetchRow(); |
63 | 66 |
// Required page details |
trunk/wb/modules/news/save_post.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_POST['post_id']) OR !is_numeric($_POST['post_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$id = $_POST['post_id']; |
33 | 34 |
$post_id = $id; |
trunk/wb/modules/news/modify_group.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$group_id = $_GET['group_id']; |
33 | 34 |
} |
trunk/wb/modules/news/rss.php | ||
---|---|---|
29 | 29 |
define('PAGE_ID', $page_id); |
30 | 30 |
} else { |
31 | 31 |
header('Location: '.WB_URL); |
32 |
exit(0); |
|
32 | 33 |
} |
33 | 34 |
if(isset($_GET['group_id']) AND is_numeric($_GET['group_id'])) { |
34 | 35 |
$group_id = $_GET['group_id']; |
trunk/wb/modules/news/delete_post.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$post_id = $_GET['post_id']; |
33 | 34 |
} |
trunk/wb/modules/news/modify_comment.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_GET['comment_id']) OR !is_numeric($_GET['comment_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$comment_id = $_GET['comment_id']; |
33 | 34 |
} |
trunk/wb/modules/news/move_up.php | ||
---|---|---|
29 | 29 |
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) { |
30 | 30 |
if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) { |
31 | 31 |
header("Location: index.php"); |
32 |
exit(0); |
|
32 | 33 |
} else { |
33 | 34 |
$id = $_GET['group_id']; |
34 | 35 |
$id_field = 'group_id'; |
trunk/wb/modules/news/save_group.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$group_id = $_POST['group_id']; |
33 | 34 |
} |
trunk/wb/modules/news/view.php | ||
---|---|---|
277 | 277 |
} |
278 | 278 |
} else { |
279 | 279 |
header('Location: '.WB_URL.'/pages/'); |
280 |
exit(0); |
|
280 | 281 |
} |
281 | 282 |
|
282 | 283 |
// Print post header |
trunk/wb/modules/news/delete_group.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_GET['group_id']) OR !is_numeric($_GET['group_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$group_id = $_GET['group_id']; |
33 | 34 |
} |
trunk/wb/modules/news/save_comment.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_POST['comment_id']) OR !is_numeric($_POST['comment_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$comment_id = $_POST['comment_id']; |
33 | 34 |
} |
trunk/wb/modules/news/delete_comment.php | ||
---|---|---|
28 | 28 |
// Get id |
29 | 29 |
if(!isset($_GET['comment_id']) OR !is_numeric($_GET['comment_id'])) { |
30 | 30 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
$comment_id = $_GET['comment_id']; |
33 | 34 |
} |
... | ... | |
35 | 36 |
// Get post id |
36 | 37 |
if(!isset($_GET['post_id']) OR !is_numeric($_GET['post_id'])) { |
37 | 38 |
header("Location: ".ADMIN_URL."/pages/index.php"); |
39 |
exit(0); |
|
38 | 40 |
} else { |
39 | 41 |
$post_id = $_GET['post_id']; |
40 | 42 |
} |
trunk/wb/modules/news/submit_comment.php | ||
---|---|---|
68 | 68 |
$query_page = $database->query("SELECT link FROM ".TABLE_PREFIX."mod_news_posts WHERE post_id = '$post_id'"); |
69 | 69 |
$page = $query_page->fetchRow(); |
70 | 70 |
header('Location: '.$wb->page_link($page['link']).'?id='.$post_id); |
71 |
|
|
72 | 71 |
} else { |
73 | 72 |
header('Location: '.WB_URL.'/pages/'); |
74 | 73 |
} |
trunk/wb/modules/admin.php | ||
---|---|---|
35 | 35 |
// Stop this file being access directly |
36 | 36 |
if(!defined('WB_URL')) { |
37 | 37 |
header('Location: ../index.php'); |
38 |
exit(0); |
|
38 | 39 |
} |
39 | 40 |
|
40 | 41 |
// Get page id |
... | ... | |
43 | 44 |
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) { |
44 | 45 |
if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) { |
45 | 46 |
header("Location: index.php"); |
47 |
exit(0); |
|
46 | 48 |
} else { |
47 | 49 |
$page_id = $_POST['page_id']; |
48 | 50 |
} |
... | ... | |
67 | 69 |
$section_id = 0; |
68 | 70 |
} else { |
69 | 71 |
header("Location: $section_required"); |
72 |
exit(0); |
|
70 | 73 |
} |
71 | 74 |
} |
72 | 75 |
|
trunk/wb/account/login_form.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../pages/index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
if(defined('SMART_LOGIN') AND SMART_LOGIN == 'enabled') { |
trunk/wb/account/forgot.php | ||
---|---|---|
40 | 40 |
if(!FRONTEND_LOGIN) { |
41 | 41 |
if(INTRO_PAGE) { |
42 | 42 |
header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION); |
43 |
exit(0); |
|
43 | 44 |
} else { |
44 | 45 |
header('Location: '.WB_URL.'/index'.PAGE_EXTENSION); |
46 |
exit(0); |
|
45 | 47 |
} |
46 | 48 |
} |
47 | 49 |
|
trunk/wb/account/preferences.php | ||
---|---|---|
28 | 28 |
if(!FRONTEND_LOGIN) { |
29 | 29 |
if(INTRO_PAGE) { |
30 | 30 |
header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
header('Location: '.WB_URL.'/index'.PAGE_EXTENSION); |
34 |
exit(0); |
|
33 | 35 |
} |
34 | 36 |
} |
35 | 37 |
|
36 | 38 |
require_once(WB_PATH.'/framework/class.wb.php'); |
37 | 39 |
if (wb::is_authenticated()==false) { |
38 | 40 |
header('Location: '.WB_URL.'/account/login.php'); |
41 |
exit(0); |
|
39 | 42 |
} |
40 | 43 |
|
41 | 44 |
// Required page details |
trunk/wb/account/password.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
// Get the values entered |
trunk/wb/account/forgot_form.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../pages/index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
// Create new database object |
trunk/wb/account/preferences_form.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
?> |
trunk/wb/account/details.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../pages/index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
// Get entered values |
trunk/wb/account/signup.php | ||
---|---|---|
28 | 28 |
if(!is_numeric(FRONTEND_SIGNUP)) { |
29 | 29 |
if(INTRO_PAGE) { |
30 | 30 |
header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION); |
31 |
exit(0); |
|
31 | 32 |
} else { |
32 | 33 |
header('Location: '.WB_URL.'/index'.PAGE_EXTENSION); |
34 |
exit(0); |
|
33 | 35 |
} |
34 | 36 |
} |
35 | 37 |
|
trunk/wb/account/email.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
// Get the values entered |
trunk/wb/account/signup2.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../pages/index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
require_once(WB_PATH.'/framework/class.wb.php'); |
trunk/wb/account/login.php | ||
---|---|---|
29 | 29 |
if(!FRONTEND_LOGIN) { |
30 | 30 |
if(INTRO_PAGE) { |
31 | 31 |
header('Location: '.WB_URL.PAGES_DIRECTORY.'/index'.PAGE_EXTENSION); |
32 |
exit(0); |
|
32 | 33 |
} else { |
33 | 34 |
header('Location: '.WB_URL.'/index'.PAGE_EXTENSION); |
35 |
exit(0); |
|
34 | 36 |
} |
35 | 37 |
} |
36 | 38 |
|
trunk/wb/account/signup_form.php | ||
---|---|---|
25 | 25 |
|
26 | 26 |
if(!defined('WB_URL')) { |
27 | 27 |
header('Location: ../index.php'); |
28 |
exit(0); |
|
28 | 29 |
} |
29 | 30 |
|
30 | 31 |
?> |
trunk/wb/framework/class.admin.php | ||
---|---|---|
34 | 34 |
|
35 | 35 |
if(!defined('WB_URL')) { |
36 | 36 |
header('Location: ../index.php'); |
37 |
exit(0); |
|
37 | 38 |
} |
38 | 39 |
|
39 | 40 |
require_once(WB_PATH.'/framework/class.wb.php'); |
... | ... | |
63 | 64 |
// First check if the user is logged-in |
64 | 65 |
if($this->is_authenticated() == false) { |
65 | 66 |
header('Location: '.ADMIN_URL.'/login/index.php'); |
67 |
exit(0); |
|
66 | 68 |
} |
67 | 69 |
// Now check if they are allowed in this section |
68 | 70 |
if($this->get_permission($section_permission) == false) { |
trunk/wb/framework/class.login.php | ||
---|---|---|
34 | 34 |
// Stop this file from being accessed directly |
35 | 35 |
if(!defined('WB_URL')) { |
36 | 36 |
header('Location: ../index.php'); |
37 |
exit(0); |
|
37 | 38 |
} |
38 | 39 |
|
39 | 40 |
define('LOGIN_CLASS_LOADED', true); |
... | ... | |
110 | 111 |
if($this->authenticate()) { |
111 | 112 |
// Authentication successful |
112 | 113 |
header("Location: ".$this->url); |
114 |
exit(0); |
|
113 | 115 |
} else { |
114 | 116 |
$this->message = $MESSAGE['LOGIN']['AUTHENTICATION_FAILED']; |
115 | 117 |
$this->increase_attemps(); |
... | ... | |
142 | 144 |
// Authentication successful |
143 | 145 |
//echo $this->url;exit(); |
144 | 146 |
header("Location: ".$this->url); |
147 |
exit(0); |
|
145 | 148 |
} else { |
146 | 149 |
$this->message = $MESSAGE['LOGIN']['AUTHENTICATION_FAILED']; |
147 | 150 |
$this->increase_attemps(); |
... | ... | |
362 | 365 |
// Warn user that they have had to many login attemps |
363 | 366 |
function warn() { |
364 | 367 |
header('Location: '.$this->warning_url); |
368 |
exit(0); |
|
365 | 369 |
} |
366 | 370 |
|
367 | 371 |
} |
trunk/wb/framework/class.order.php | ||
---|---|---|
35 | 35 |
// Stop this file from being accessed directly |
36 | 36 |
if(!defined('WB_URL')) { |
37 | 37 |
header('Location: ../index.php'); |
38 |
exit(0); |
|
38 | 39 |
} |
39 | 40 |
|
40 | 41 |
define('ORDERING_CLASS_LOADED', true); |
trunk/wb/framework/convert.php | ||
---|---|---|
30 | 30 |
*/ |
31 | 31 |
if(!defined('WB_URL')) { |
32 | 32 |
header('Location: ../index.php'); |
33 |
exit(0); |
|
33 | 34 |
} |
34 | 35 |
|
35 | 36 |
$conversion_array = array( |
trunk/wb/framework/class.frontend.php | ||
---|---|---|
31 | 31 |
|
32 | 32 |
if(!defined('WB_PATH')) { |
33 | 33 |
header('Location: ../index.php'); |
34 |
exit(0); |
|
34 | 35 |
} |
35 | 36 |
|
36 | 37 |
|
... | ... | |
200 | 201 |
if($this->is_authenticated() == false) { |
201 | 202 |
// User needs to login first |
202 | 203 |
header("Location: ".WB_URL."/account/login".PAGE_EXTENSION.'?redirect='.$this->link); |
204 |
exit(0); |
|
203 | 205 |
} |
204 | 206 |
// Check if we should show this page |
205 | 207 |
if($this->show_page($this->page) == false) { |
trunk/wb/framework/frontend.functions.php | ||
---|---|---|
29 | 29 |
*/ |
30 | 30 |
if(!defined('WB_URL')) { |
31 | 31 |
header('Location: ../index.php'); |
32 |
exit(0); |
|
32 | 33 |
} |
33 | 34 |
|
34 | 35 |
// references to objects and variables that changed their names |
trunk/wb/framework/class.database.php | ||
---|---|---|
35 | 35 |
// Stop this file from being accessed directly |
36 | 36 |
if(!defined('WB_URL')) { |
37 | 37 |
header('Location: ../index.php'); |
38 |
exit(0); |
|
38 | 39 |
} |
39 | 40 |
|
40 | 41 |
if(!defined('DB_URL')) { |
trunk/wb/framework/functions.php | ||
---|---|---|
33 | 33 |
// Stop this file from being accessed directly |
34 | 34 |
if(!defined('WB_URL')) { |
35 | 35 |
header('Location: ../index.php'); |
36 |
exit(0); |
|
36 | 37 |
} |
37 | 38 |
|
38 | 39 |
// Define that this file has been loaded |
trunk/wb/index.php | ||
---|---|---|
31 | 31 |
// Check if the config file has been set-up |
32 | 32 |
if(!defined('WB_PATH')) { |
33 | 33 |
header("Location: install/index.php"); |
34 |
exit(0); |
|
34 | 35 |
} |
35 | 36 |
|
36 | 37 |
require_once(WB_PATH.'/framework/class.frontend.php'); |
Also available in: Unified diff
Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.