From 878f4303c7f8759f2e7d1f742e43c175a664ede2 Mon Sep 17 00:00:00 2001
From: Joe Hunt <joe.hunt.consulting@gmail.com>
Date: Mon, 1 Oct 2007 13:00:47 +0000
Subject: [PATCH] These files were still vulnerable. Fixed.

---
 access/login.php           | 2 ++
 includes/lang/language.php | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/access/login.php b/access/login.php
index 408af0e2..12989497 100644
--- a/access/login.php
+++ b/access/login.php
@@ -1,4 +1,6 @@
 <?php
+	if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
+		die("Restricted access");
 	include_once($path_to_root . "/includes/ui/ui_view.inc");
 	// Display demo user name and password within login form if "$allow_demo_mode" is true
 	$demo_text = "";
diff --git a/includes/lang/language.php b/includes/lang/language.php
index 1bde610c..bd7e2082 100644
--- a/includes/lang/language.php
+++ b/includes/lang/language.php
@@ -1,5 +1,7 @@
 <?php
 
+if (!isset($path_to_root) || isset($_GET['path_to_root']) || isset($_POST['path_to_root']))
+	die("Restricted access");
 include_once($path_to_root . "/lang/installed_languages.inc");
 include_once($path_to_root . "/includes/lang/gettext.php");
 
-- 
2.30.2