From: Joe Hunt <joe.hunt.consulting@gmail.com>
Date: Mon, 1 Oct 2007 13:00:47 +0000 (+0000)
Subject: These files were still vulnerable. Fixed.
X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=commitdiff_plain;h=043ebb078269b7328191ed46506c7d22e3479226;p=textcart.git

These files were still vulnerable. Fixed.
---

diff --git a/access/login.php b/access/login.php
index 408af0e..1298949 100644
--- a/access/login.php
+++ b/access/login.php
@@ -1,4 +1,6 @@
 <?php
+	if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
+		die("Restricted access");
 	include_once($path_to_root . "/includes/ui/ui_view.inc");
 	// Display demo user name and password within login form if "$allow_demo_mode" is true
 	$demo_text = "";
diff --git a/includes/lang/language.php b/includes/lang/language.php
index 1bde610..bd7e208 100644
--- a/includes/lang/language.php
+++ b/includes/lang/language.php
@@ -1,5 +1,7 @@
 <?php
 
+if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
+	die("Restricted access");
 include_once($path_to_root . "/lang/installed_languages.inc");
 include_once($path_to_root . "/includes/lang/gettext.php");