* (bug 5355) Include skin name and style JS settings in page source;

[lhc/web/wiklou.git] / img_auth.php
diff --git a/img_auth.php b/img_auth.php

index 6f6152e..fb58ba2 100644 (file)
--- a/img_auth.php
+++ b/img_auth.php
@@ -1,15 +1,20 @@
  <?php
  /**
   * Image download authorisation script
- * 
+ *
   * To use, in LocalSettings.php set $wgUploadDirectory to point to a non-public
   * directory, and $wgUploadPath to point to this file. Also set $wgWhitelistRead
   * to an array of pages you want everyone to be able to access. Your server must
- * support PATH_INFO, CGI-based configurations generally don't. 
+ * support PATH_INFO, CGI-based configurations generally don't.
   */
  # Valid web server entry point, enable includes
  define( 'MEDIAWIKI', true );
  
+if ( isset( $_REQUEST['GLOBALS'] ) ) {
+       echo '<a href="http://www.hardened-php.net/index.76.html">$GLOBALS overwrite vulnerability</a>';
+       die( -1 );
+}
+
  require_once( 'includes/Defines.php' );
  require_once( './LocalSettings.php' );
  require_once( 'includes/Setup.php' );
@@ -45,7 +50,7 @@ wfStreamFile( $filename );
  
  function wfForbidden() {
         header( 'HTTP/1.0 403 Forbidden' );
-       print 
+       print
  "<html><body>
  <h1>Access denied</h1>
  <p>You need to log in to access files on this server</p>