block loading include files directly

2011-04-13 22:21:07 +10:00
parent a9bdc6eeb7
commit b895102563
7 changed files with 40 additions and 5 deletions
--- a/inc/user.php
+++ b/inc/user.php
@@ -1,4 +1,10 @@
 <?php
+	if($_SERVER['SCRIPT_FILENAME'] == str_replace('\\', '/', __FILE__)) {
+		// You cannot request this file directly.
+		header('Location: ../', true, 302);
+		exit;
+	}
+	
 	// 'false' means that the user is not logged in as a moderator
 	$mod = false;