security hotfix (lame transports)

diff --git a/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php b/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php
index 802d1ceae47e1651618497a057db302e2e7c5c72..b1bb7521e047ca0188ec87ff8d524d9899d496be 100644 (file)
--- a/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php
+++ b/wwwroot/inc/smarty/node_methodz/function.get_threaded_children.php
@@ -45,7 +45,7 @@ else $security = "";
                // by br & maniac
 
                if ($node['node_vector']=='') {
-                 $node['node_vector']='blabla';
+                 $node['node_vector']='blabla'; // XXX
        //        system("echo \"node: $node[node_id]\" >> /tmp/blabla.log") ;
                }
 

diff --git a/wwwroot/inc/transports.inc b/wwwroot/inc/transports.inc
index 13e18322aa296148ac079a30dfba638ee4aff4b2..b8ab4b1d60b296809c8ef9792376348f5056a8b4 100644 (file)
--- a/wwwroot/inc/transports.inc
+++ b/wwwroot/inc/transports.inc
@@ -1,7 +1,9 @@
 <?php
 
 function transport_load($transport) {
-       require_once(TRANSPORT_DIR.$transport.'.inc');
+
+       // XXX security hotfix, TODO harvie rewrite
+       require_once(TRANSPORT_DIR.'kyberia.sk.inc');
 }
 
 function transport_link($url) {