From: niekt0 <niekt0@kyberia.cz>
Date: Mon, 19 Sep 2011 19:11:53 +0000 (+0200)
Subject: security hotfix (lame transports)
X-Git-Url: http://git.harvie.cz/?a=commitdiff_plain;h=b584ae7bcbbe0ada3e9c6f135db5ea9f7c4905bf;hp=d7684af02446dc66951a5c3b428fca24f8e4fbee;p=mirrors%2FKyberia-bloodline.git

security hotfix (lame transports)
---

diff --git a/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php b/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php
index 802d1ce..b1bb752 100644
--- a/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php
+++ b/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php
@@ -45,7 +45,7 @@ else $security = "";
 		// by br & maniac
 
 		if ($node['node_vector']=='') {
-		  $node['node_vector']='blabla';
+		  $node['node_vector']='blabla'; // XXX
 	//	  system("echo \"node: $node[node_id]\" >> /tmp/blabla.log") ;
 		}
 
diff --git a/wwwroot/inc/transports.inc b/wwwroot/inc/transports.inc
index 13e1832..b8ab4b1 100644
--- a/wwwroot/inc/transports.inc
+++ b/wwwroot/inc/transports.inc
@@ -1,7 +1,9 @@
 <?php
 
 function transport_load($transport) {
-	require_once(TRANSPORT_DIR.$transport.'.inc');
+
+	// XXX security hotfix, TODO harvie rewrite
+	require_once(TRANSPORT_DIR.'kyberia.sk.inc');
 }
 
 function transport_link($url) {