From 667899855afff43b025d5ed665235519bbb38a5f Mon Sep 17 00:00:00 2001
From: ravenlp <ravenlp@gmail.com>
Date: Tue, 18 Sep 2007 23:26:11 +0000
Subject: [PATCH] Secured the admin/user.php

---
 admin/user.php |  10 ++---
 entry.php      | 107 +++++++++++++++++++++++++------------------------
 2 files changed, 59 insertions(+), 58 deletions(-)

diff --git a/admin/user.php b/admin/user.php
index d4b94cf..e8a5322 100644
--- a/admin/user.php
+++ b/admin/user.php
@@ -1,5 +1,6 @@
 <?php
-if(!defined('entry') || !entry) die('Not a valid page'); /* ===========================
+if(!defined('entry')) define('entry', true);
+ /* ===========================
 
   gelato CMS - A PHP based tumblelog CMS
   development version
@@ -11,10 +12,9 @@ if(!defined('entry') || !entry) die('Not a valid page'); /* ====================
   =========================== */
 ?>
 <?php
-require_once('../config.php');
-include("../classes/functions.php");
-include("../classes/user.class.php");
-require_once("../classes/configuration.class.php");
+require('../entry.php');
+global $user, $conf, $tumble;
+$template = new plantillas("admin");
 
 $user = new user();
 $conf = new configuration();
diff --git a/entry.php b/entry.php
index d66be75..f131706 100644
--- a/entry.php
+++ b/entry.php
@@ -1,53 +1,54 @@
-<?php
- if(!defined('entry') || !entry) die('Not a valid page');
-/*
- * Created on Sep 15, 2007
- *
- * Known Entry Points 
- * install.php
- * index.php
- * login.php
- * update.php
- * rss.php
- * admin/index.php
- * admin/close.php
- * admin/ajax.php
- * admin/settings.php
- * admin/options.php
- * admin/admin.php
- * admin/comments.php
- */
-
- 
-// PHP settings specific to Gelato
-ini_set('pcre.backtrack_limit', '10000');
-
-// Globals to be used throughout the application        
-$configFile = dirname(__FILE__).DIRECTORY_SEPARATOR."config.php";
-
-if (!file_exists($configFile)) {
-	header("Location: install.php");  
-} else {
-        require(dirname(__FILE__).DIRECTORY_SEPARATOR."config.php");
-}       
-
-require_once("classes/configuration.class.php");
-require_once("classes/textile.class.php");
-require_once("classes/gelato.class.php");    
-require_once("classes/templates.class.php");
-require_once("classes/pagination.class.php");
-require_once("classes/user.class.php");
-require_once("classes/comments.class.php");
-require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'mysql_connection.class.php');
-require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'streams.class.php');
-require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'gettext.class.php');
-require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'lang.functions.php');
-        
-$user = new user();
-$conf = new configuration();
-$tumble = new gelato();
-
-
-session_start();
-
-?>
+<?php
+ if(!defined('entry') || !entry) die('Not a valid page');
+/*
+ * Created on Sep 15, 2007
+ *
+ * Known Entry Points 
+ * install.php
+ * index.php
+ * login.php
+ * update.php
+ * rss.php
+ * admin/index.php
+ * admin/close.php
+ * admin/ajax.php
+ * admin/settings.php
+ * admin/options.php
+ * admin/admin.php
+ * admin/comments.php
+ * admin/users.php
+ */
+
+ 
+// PHP settings specific to Gelato
+ini_set('pcre.backtrack_limit', '10000');
+
+// Globals to be used throughout the application        
+$configFile = dirname(__FILE__).DIRECTORY_SEPARATOR."config.php";
+
+if (!file_exists($configFile)) {
+	header("Location: install.php");  
+} else {
+        require(dirname(__FILE__).DIRECTORY_SEPARATOR."config.php");
+}       
+
+require_once("classes/configuration.class.php");
+require_once("classes/textile.class.php");
+require_once("classes/gelato.class.php");    
+require_once("classes/templates.class.php");
+require_once("classes/pagination.class.php");
+require_once("classes/user.class.php");
+require_once("classes/comments.class.php");
+require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'mysql_connection.class.php');
+require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'streams.class.php');
+require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'gettext.class.php');
+require_once(Absolute_Path.'classes'.DIRECTORY_SEPARATOR.'lang.functions.php');
+        
+$user = new user();
+$conf = new configuration();
+$tumble = new gelato();
+
+
+session_start();
+
+?>