diff options
| -rw-r--r-- | admin/theme.php | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/admin/theme.php b/admin/theme.php index 3e641bf12..2771b728d 100644 --- a/admin/theme.php +++ b/admin/theme.php @@ -34,6 +34,13 @@ if (empty($_GET['theme'])) die('Invalid theme URL'); } +include_once(PHPWG_ROOT_PATH.'admin/include/themes.class.php'); +$themes = new themes(); +if (!in_array($_GET['theme'], array_keys($themes->fs_themes))) +{ + die('Invalid theme'); +} + $filename = PHPWG_THEMES_PATH.$_GET['theme'].'/admin/admin.inc.php'; if (is_file($filename)) { |