From b8951025635edc3c291d39bbab9f248e8c3de720 Mon Sep 17 00:00:00 2001
From: Savetheinternet <savetheinternet@n0v4.com>
Date: Wed, 13 Apr 2011 22:21:07 +1000
Subject: block loading include files directly

---
 inc/mod.php | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'inc/mod.php')

diff --git a/inc/mod.php b/inc/mod.php
index 274159ba..78351ba7 100644
--- a/inc/mod.php
+++ b/inc/mod.php
@@ -1,5 +1,10 @@
 <?php
-		
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
+	
 	// Creates a small random string for validating moderators' cookies
 	function mkhash($length=12) {
 		// The method here isn't really important,
-- 
cgit v1.3