Security fix: do not use $IP on include (thanks brion)

diff --git a/skins/Chick.php b/skins/Chick.php
index 1ac36dc..729d59e 100644 (file)
--- a/skins/Chick.php
+++ b/skins/Chick.php
@@ -1,6 +1,6 @@
 <?php
 if ($wgUsePHPTal) {
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 class SkinChick extends SkinPHPTal {
        function initPage( &$out ) {

diff --git a/skins/DaVinci.php b/skins/DaVinci.php
index aff3cb6..aa36315 100644 (file)
--- a/skins/DaVinci.php
+++ b/skins/DaVinci.php
@@ -1,6 +1,6 @@
 <?php
 if ($wgUsePHPTal) {
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 class SkinDaVinci extends SkinPHPTal {
        function initPage( &$out ) {

diff --git a/skins/Mono.php b/skins/Mono.php
index a15100d..0ed5079 100644 (file)
--- a/skins/Mono.php
+++ b/skins/Mono.php
@@ -1,6 +1,6 @@
 <?php
 if ($wgUsePHPTal) {
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 class SkinMono extends SkinPHPTal {
        function initPage( &$out ) {

diff --git a/skins/MonoBook.php b/skins/MonoBook.php
index 949fd94..1257c92 100644 (file)
--- a/skins/MonoBook.php
+++ b/skins/MonoBook.php
@@ -1,6 +1,6 @@
 <?php
 if ($wgUsePHPTal) {
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 class SkinMonoBook extends SkinPHPTal {
        function initPage( &$out ) {

diff --git a/skins/MySkin.php b/skins/MySkin.php
index 316b77b..e1e332a 100644 (file)
--- a/skins/MySkin.php
+++ b/skins/MySkin.php
@@ -1,7 +1,6 @@
 <?php
 if ($wgUsePHPTal) {
-
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 class SkinMySkin extends SkinPHPTal {
        function initPage( &$out ) {

diff --git a/skins/SkinPHPTal.sample b/skins/SkinPHPTal.sample
index ad8f8ad..a85702b 100644 (file)
--- a/skins/SkinPHPTal.sample
+++ b/skins/SkinPHPTal.sample
@@ -2,7 +2,7 @@
 # Test if PHPTal is enabled. If not MediaWiki will load the 'standard' skin
 # which doesnt use PHPTal
 if ($wgUsePHPTal) {
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 # Your class extension is defined there.
 #

diff --git a/skins/WikimediaWiki.php b/skins/WikimediaWiki.php
index 0cb9dbd..9f4f2d6 100644 (file)
--- a/skins/WikimediaWiki.php
+++ b/skins/WikimediaWiki.php
@@ -3,7 +3,7 @@
 # $Id$
 
 if($wgUsePHPTal) {
-require_once($IP.'/includes/SkinPHPTal.php');
+require_once('includes/SkinPHPTal.php');
 
 $wgExtraSkins['wikimediawiki'] = 'Wikimediawiki';