From b8951025635edc3c291d39bbab9f248e8c3de720 Mon Sep 17 00:00:00 2001 From: Savetheinternet Date: Wed, 13 Apr 2011 22:21:07 +1000 Subject: block loading include files directly --- inc/config.php | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'inc/config.php') diff --git a/inc/config.php b/inc/config.php index bde1c6ee..58b6a860 100644 --- a/inc/config.php +++ b/inc/config.php @@ -588,4 +588,10 @@ // Link imageboard to your Google Analytics account to track users and provide marketing insights. // $config['google_analytics'] = 'UA-xxxxxxx-yy'; + + if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) { + // You cannot request this file directly. + header('Location: ../', true, 302); + exit; + } ?> \ No newline at end of file -- cgit v1.3