[squirrelmail.git] / plugins / squirrelspell / sqspell_interface.php

<?php

/**
   SQSPELL_INTERFACE.PHP
   ----------------------
   This is a main wrapper for the pop-up window interface of
   SquirrelSpell.
  								**/
	
// Set up a couple of non-negotiable constants. Don't change these,
// the setuppable stuff is in sqspell_config.php
$SQSPELL_DIR="squirrelspell";
$SQSPELL_CRYPTO=false;

// Load the necessary stuff.
chdir("..");
include("../src/validate.php");
include("../src/load_prefs.php");
include ("$SQSPELL_DIR/sqspell_config.php");
require ("$SQSPELL_DIR/sqspell_functions.php");

// Now load the necessary module from the modules dir.
//
if (!$MOD) $MOD="init";

// see if someone is attempting to be nasty by trying to get out of the
// modules directory, although it probably wouldn't do them any good,
// since every module has to end with .mod.php. Still, they deserve
// to be warned. ;)
if (strstr($MOD, ".") || strstr($MOD, "/") || strstr($MOD, "%")){ 
	echo "SECURITY BREACH ON DECK 5! CMDR TUVOK AND SECURITY TEAM REQUESTED.";
        exit;
}
// fetch the module now.
include ("$SQSPELL_DIR/modules/$MOD.mod.php");
?>
Commit	Line	Data
849bdf42	1	<?php
	2
	3	/**
	4	SQSPELL_INTERFACE.PHP
	5	----------------------
	6	This is a main wrapper for the pop-up window interface of
	7	SquirrelSpell.
	8	**/
	9
	10	// Set up a couple of non-negotiable constants. Don't change these,
	11	// the setuppable stuff is in sqspell_config.php
	12	$SQSPELL_DIR="squirrelspell";
	13	$SQSPELL_CRYPTO=false;
	14
	15	// Load the necessary stuff.
	16	chdir("..");
	17	include("../src/validate.php");
	18	include("../src/load_prefs.php");
	19	include ("$SQSPELL_DIR/sqspell_config.php");
	20	require ("$SQSPELL_DIR/sqspell_functions.php");
	21
	22	// Now load the necessary module from the modules dir.
	23	//
	24	if (!$MOD) $MOD="init";
	25
	26	// see if someone is attempting to be nasty by trying to get out of the
	27	// modules directory, although it probably wouldn't do them any good,
	28	// since every module has to end with .mod.php. Still, they deserve
	29	// to be warned. ;)
	30	if (strstr($MOD, ".") \|\| strstr($MOD, "/") \|\| strstr($MOD, "%")){
	31	echo "SECURITY BREACH ON DECK 5! CMDR TUVOK AND SECURITY TEAM REQUESTED.";
	32	exit;
	33	}
	34	// fetch the module now.
	35	include ("$SQSPELL_DIR/modules/$MOD.mod.php");
	36	?>