From fcbf6f5c4c135ae08aa2d7baff236fb784b00083 Mon Sep 17 00:00:00 2001
From: DL6ER <derigs@ph1.uni-koeln.de>
Date: Mon, 12 Dec 2016 18:48:04 +0100
Subject: [PATCH] Prevent direct access to savesettings.php

---
 php/savesettings.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/php/savesettings.php b/php/savesettings.php
index 5274bfc8..dd280572 100644
--- a/php/savesettings.php
+++ b/php/savesettings.php
@@ -1,5 +1,10 @@
 <?php
 
+if(basename($_SERVER['SCRIPT_FILENAME']) !== "settings.php")
+{
+	die("Direct access to this script is forbidden!");
+}
+
 function validIP($address){
 	return !filter_var($address, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) === false;
 }