block loading include files directly

7 files changed, 40 insertions, 5 deletions

diff --git a/inc/config.php b/inc/config.php
index bde1c6ee..58b6a860 100644
--- a/inc/config.php
+++ b/inc/config.php
@@ -588,4 +588,10 @@
 	
 	// Link imageboard to your Google Analytics account to track users and provide marketing insights.
 	// $config['google_analytics'] = 'UA-xxxxxxx-yy';
+	
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
 ?>
\ No newline at end of file
diff --git a/inc/database.php b/inc/database.php
index 21fabe71..88ca1c0d 100644
--- a/inc/database.php
+++ b/inc/database.php
@@ -1,4 +1,9 @@
 <?php
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
 	
 	function sql_open() {
 		global $pdo, $config;
diff --git a/inc/display.php b/inc/display.php
index 9ba5cac6..1b5e98f7 100644
--- a/inc/display.php
+++ b/inc/display.php
@@ -1,4 +1,10 @@
 <?php
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
+	
 	/*
 		Stuff to help with the display.
 	*/
diff --git a/inc/functions.php b/inc/functions.php
index 2a45c606..7ec58e79 100644
--- a/inc/functions.php
+++ b/inc/functions.php
@@ -1,4 +1,10 @@
 <?php
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
+	
 	loadConfig();
 	
 	function loadConfig() {
diff --git a/inc/mod.php b/inc/mod.php
index 274159ba..78351ba7 100644
--- a/inc/mod.php
+++ b/inc/mod.php
@@ -1,5 +1,10 @@
 <?php
-		
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
+	
 	// Creates a small random string for validating moderators' cookies
 	function mkhash($length=12) {
 		// The method here isn't really important,
diff --git a/inc/template.php b/inc/template.php
index e0761d6a..e966a057 100644
--- a/inc/template.php
+++ b/inc/template.php
@@ -1,8 +1,9 @@
 <?php

-	

-	// PHP Template Preprocessor by Savetheinternet

-	// http://codecanyon.net/user/Savetheinternet

-	// savetheinternet@n0v4.com

+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {

+		// You cannot request this file directly.

+		header('Location: ../', true, 302);

+		exit;

+	}

 	

 	// -----------------------------------------------------

 	// Standard configuration

diff --git a/inc/user.php b/inc/user.php
index 1c05b3a1..223eba64 100644
--- a/inc/user.php
+++ b/inc/user.php
@@ -1,4 +1,10 @@
 <?php
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
+	
 	// 'false' means that the user is not logged in as a moderator
 	$mod = false;