4 Commits

Author	SHA1	Message	Date
Hamish Friedlander	604d9bf7dc	Split Core.php into Constants.php and Core.php and adjust main.php startup ... The recent flush filter fix had a problem that you couldnt set a custom BASE_PATH in _ss_environment because that file didnt get included until after checking the confirmation token. This patch pulls the part of Core.php that defines BASE_PATH into a seperate file that can be included earlier in the startup sequence so that ParameterConfirmationToken can access it. Core.php includes Constants.php with a require_once call, so for startup scripts that dont pull in Constants.php themselves (like cli-script.php) no change is needed.	2013-07-22 13:52:00 +12:00
Hamish Friedlander	a312cd08e1	FIX: Ignore invalid tokens instead of throwing 403	2013-07-19 14:47:05 +12:00
Hamish Friedlander	036c36a7dd	FIX: Have ParameterConfirmationToken work regardless of include path	2013-07-19 14:33:56 +12:00
Hamish Friedlander	1298d4a5bd	FIX Prevent DOS by checking for env and admin on ?flush=1 (#1692)	2013-07-19 12:24:32 +12:00