02-20-2016, 09:42 PM
I think we agreed in the past that modules should only accessed using
/?module=name&feature.
They should never be used in direct call ex:
/module/code/mycode.php, this bypass the core and act as an independent application.
We will ban by default any access to .php files in modules. Only assets will be allowed.
Thanks to fix it, as it will ship in 1.0.4.
/?module=name&feature.
They should never be used in direct call ex:
/module/code/mycode.php, this bypass the core and act as an independent application.
We will ban by default any access to .php files in modules. Only assets will be allowed.
Thanks to fix it, as it will ship in 1.0.4.