summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Bruederli <thomas@roundcube.net>2013-01-10 09:41:12 +0100
committerThomas Bruederli <thomas@roundcube.net>2013-01-10 09:42:40 +0100
commitd9f061b558fd36e31322609ee5f378922122e21e (patch)
treeddaa209b6bf602400ff45b5d9856e5c049f5e465
parenta0eb4aef29d6b6700b562691a51b4a232dbfb123 (diff)
Avoid direct execution of installer includes (#1488895)
-rw-r--r--installer/check.php7
-rw-r--r--installer/config.php7
-rw-r--r--installer/test.php7
3 files changed, 21 insertions, 0 deletions
diff --git a/installer/check.php b/installer/check.php
index 886200b84..14fc4f06e 100644
--- a/installer/check.php
+++ b/installer/check.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php" method="get">
<?php
diff --git a/installer/config.php b/installer/config.php
index 6897ffbba..d6846edc7 100644
--- a/installer/config.php
+++ b/installer/config.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php" method="post">
<input type="hidden" name="_step" value="2" />
<?php
diff --git a/installer/test.php b/installer/test.php
index e266bf05f..b118924e4 100644
--- a/installer/test.php
+++ b/installer/test.php
@@ -1,3 +1,10 @@
+<?php
+
+if (!class_exists('rcube_install') || !is_object($RCI)) {
+ die("Not allowed! Please open installer/index.php instead.");
+}
+
+?>
<form action="index.php?_step=3" method="post">
<h3>Check config files</h3>