+ case 'style':
+
+ // need to get the right template set up
+ sqGetGlobalVar('templatedir', $templatedir, SQ_GET);
+
+ // sanitize just in case...
+ $templatedir = preg_replace('/(\.\.\/){1,}/', '', $templatedir);
+
+ // could also conceivably make sure given templatedir is in $aTemplateSet
+
+ // set template directory only if what was given is valid
+ if (is_dir(SM_PATH . 'templates/' . $templatedir . '/')) {
+ $sTplDir = SM_PATH . 'templates/' . $templatedir . '/';
+ }
+
+ session_write_close();
+ sqsetcookieflush();
+ break;
+