diff options
| author | Savetheinternet <savetheinternet@n0v4.com> | 2011-01-01 22:12:31 +1100 |
|---|---|---|
| committer | Savetheinternet <savetheinternet@n0v4.com> | 2011-01-01 22:12:31 +1100 |
| commit | e4016687321770054d134f13f3275fc0523588e8 (patch) | |
| tree | a82919ab0620698454e571c2fee79e56d6d59cbd /inc/config.php | |
| parent | 2179b03980fbb21f5f0723367438fecff1324acb (diff) | |
Fixed major security bug and image deleting
Diffstat (limited to 'inc/config.php')
| -rw-r--r-- | inc/config.php | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/inc/config.php b/inc/config.php index 24d522c7..79f4bf1e 100644 --- a/inc/config.php +++ b/inc/config.php @@ -99,6 +99,8 @@ */ define('ALLOW_ZIP', false, true); define('ZIP_IMAGE', 'static/zip.png', true); + + define('DELETED_IMAGE', 'static/deleted.png', true); /** Redraw the image using GD functions to strip any excess data (commonly ZIP archives) @@ -131,6 +133,7 @@ define('POST_URL', ROOT . 'post.php', true); define('FILE_INDEX', 'index.html', true); define('FILE_PAGE', '%d.html', true); + define('FILE_MOD', 'mod.php', true); // Multi-board (%s is board abbreviation) define('BOARD_PATH', '%s/', true); @@ -232,6 +235,9 @@ '|' . str_replace('%s', '\w{1,8}', preg_quote(BOARD_PATH, '/')) . str_replace('%d', '\d+', preg_quote(FILE_PAGE, '/')) . + '|' . + preg_quote(FILE_MOD, '/') . + '\?\/.+' . ')$/i', true); if(ROOT_FILE) { |