From 22cfadc9a6161ac3bcfa589cc2e3e23f1bebfa76 Mon Sep 17 00:00:00 2001
From: ozhozh <ozhozh@12232710-3e20-11de-b438-597f59cd7555>
Date: Fri, 14 Jan 2011 07:24:32 +0000
Subject: [PATCH] Prevent full path disclosure in case of direct calls. Fixes
 issue 646.

git-svn-id: http://yourls.googlecode.com/svn/trunk@571 12232710-3e20-11de-b438-597f59cd7555
---
 includes/auth.php                       | 3 +++
 user/plugins/hyphens-in-urls/plugin.php | 3 +++
 user/plugins/random-bg/plugin.php       | 3 +++
 user/plugins/sample-page/plugin.php     | 3 +++
 user/plugins/sample-plugin/plugin.php   | 3 +++
 user/plugins/sample-toolbar/plugin.php  | 3 +++
 6 files changed, 18 insertions(+)

diff --git a/includes/auth.php b/includes/auth.php
index 0ca8f35..f554013 100644
--- a/includes/auth.php
+++ b/includes/auth.php
@@ -1,4 +1,7 @@
 <?php
+// No direct call
+if( !defined( 'YOURLS_ABSPATH' ) ) die();
+
 $auth = yourls_apply_filter( 'is_valid_user', yourls_is_valid_user() );
 
 if( $auth !== true ) {
diff --git a/user/plugins/hyphens-in-urls/plugin.php b/user/plugins/hyphens-in-urls/plugin.php
index a9bacb0..4d9b7a8 100644
--- a/user/plugins/hyphens-in-urls/plugin.php
+++ b/user/plugins/hyphens-in-urls/plugin.php
@@ -8,6 +8,9 @@
 Author URI: http://ozh.org/
 */
 
+// No direct call
+if( !defined( 'YOURLS_ABSPATH' ) ) die();
+
 yourls_add_filter( 'get_shorturl_charset', 'ozh_hyphen_in_charset' );
 function ozh_hyphen_in_charset( $in ) {
 	return $in.'-';
diff --git a/user/plugins/random-bg/plugin.php b/user/plugins/random-bg/plugin.php
index bd870b5..ed27eed 100644
--- a/user/plugins/random-bg/plugin.php
+++ b/user/plugins/random-bg/plugin.php
@@ -8,6 +8,9 @@
 Author URI: http://ozh.org/
 */
 
+// No direct call
+if( !defined( 'YOURLS_ABSPATH' ) ) die();
+
 // Add the inline style
 yourls_add_action( 'html_head', 'ozh_yourls_randombg' );
 function ozh_yourls_randombg() {
diff --git a/user/plugins/sample-page/plugin.php b/user/plugins/sample-page/plugin.php
index 1001a89..e6c8e73 100644
--- a/user/plugins/sample-page/plugin.php
+++ b/user/plugins/sample-page/plugin.php
@@ -8,6 +8,9 @@
 Author URI: http://ozh.org/
 */
 
+// No direct call
+if( !defined( 'YOURLS_ABSPATH' ) ) die();
+
 // Register our plugin admin page
 yourls_add_action( 'plugins_loaded', 'ozh_yourls_samplepage_add_page' );
 function ozh_yourls_samplepage_add_page() {
diff --git a/user/plugins/sample-plugin/plugin.php b/user/plugins/sample-plugin/plugin.php
index ba90d37..1ec2a47 100644
--- a/user/plugins/sample-plugin/plugin.php
+++ b/user/plugins/sample-plugin/plugin.php
@@ -8,6 +8,9 @@
 Author URI: http://ozh.org/
 */
 
+// No direct call
+if( !defined( 'YOURLS_ABSPATH' ) ) die();
+
 /* Example of an action
  *
  * We're going to add an entry to the menu.
diff --git a/user/plugins/sample-toolbar/plugin.php b/user/plugins/sample-toolbar/plugin.php
index 84dc6f6..d886de7 100644
--- a/user/plugins/sample-toolbar/plugin.php
+++ b/user/plugins/sample-toolbar/plugin.php
@@ -9,6 +9,9 @@
 Disclaimer: Toolbars ruin the user experience. Be warned.
 */
 
+// No direct call
+if( !defined( 'YOURLS_ABSPATH' ) ) die();
+
 global $ozh_toolbar;
 $ozh_toolbar['do'] = false;
 $ozh_toolbar['keyword'] = '';
-- 
2.45.0