protect login-related files from direct access

2026-05-03 16:29:45 -05:00 · 2021-08-17 09:02:08 -07:00
parent d1d77580e6
commit f9421eb8e8
3 changed files with 2 additions and 2 deletions
@@ -29,7 +29,7 @@ if ($_SERVER['REQUEST_URI'] == '/logout') {

 $result = exec( "/usr/bin/passwd --status root");
 if (($result === false) || (substr($result, 0, 6) !== "root P"))
-  include "$docroot/webGui/include/set-password.php";
+  include "$docroot/webGui/include/.set-password.php";
 else
-  include "$docroot/webGui/include/login.php";
+  include "$docroot/webGui/include/.login.php";
 ?>