diff --git a/pages/exec.php b/pages/exec.php index 3db08bc6e..dd233aac8 100644 --- a/pages/exec.php +++ b/pages/exec.php @@ -48,8 +48,9 @@ session_write_close(); $sTargetPage = APPROOT.'env-'.$sEnvironment.'/'.$sModule.'/'.$sPage; -if (!file_exists($sTargetPage)) -{ +if (!file_exists($sTargetPage) + || (strtolower(pathinfo($sTargetPage, PATHINFO_EXTENSION)) !== "php") +) { // Do not recall the parameters (security takes precedence) echo "Wrong module, page name or environment..."; exit;