summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Bruederli <thomas@roundcube.net>2013-01-10 09:41:12 +0100
committerThomas Bruederli <thomas@roundcube.net>2013-01-10 09:43:22 +0100
commit5845b2502787f6672e317bd271018e8cd778ec02 (patch)
treee2b4c816752e9fca3864c79ed5954272d72bcc2c
parent941f8b5affaffe7f24a6447aba389980778d427a (diff)
Avoid direct execution of installer includes (#1488895)
-rw-r--r--installer/check.php7
-rw-r--r--installer/config.php7
-rw-r--r--installer/test.php7
3 files changed, 21 insertions, 0 deletions
diff --git a/installer/check.php b/installer/check.php
index 5cb30225e..514ec42a9 100644
--- a/installer/check.php
+++ b/installer/check.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php" method="get">
<?php
diff --git a/installer/config.php b/installer/config.php
index bd676b12e..41aa36e10 100644
--- a/installer/config.php
+++ b/installer/config.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php" method="post">
<input type="hidden" name="_step" value="2" />
<?php
diff --git a/installer/test.php b/installer/test.php
index 2dd330531..b8b60cf3d 100644
--- a/installer/test.php
+++ b/installer/test.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php?_step=3" method="post">
<h3>Check config files</h3>