Changeset 1956

Timestamp:

12/14/2004 09:45:49 AM (21 years ago)

Author:

saxmatt

Message:

Don't allow viewing/editing of wp-config.php through web interface.

File:

• trunk/wp-admin/templates.php (modified) (1 diff)

trunk/wp-admin/templates.php

@@ -52 +52 @@
 
     require_once('./admin-header.php');
-    if ($user_level <= 5) {
+    if ( $user_level <= 5 )
         die(__('<p>You have do not have sufficient permissions to edit templates for this blog.</p>'));
-    }
+
+    if ( strstr( $file, 'wp-config.php' ) )
+        die( __('<p>The config file cannot be edited or viewed through the web interface. Sorry!</p>') );
 
     update_recently_edited($file);