From 312857d2139fb8e6c767ae95331f67487803cae6 Mon Sep 17 00:00:00 2001
From: Martin Stadler <martin@siarp.de>
Date: Thu, 26 Jan 2017 13:16:12 +0100
Subject: [PATCH] secure shoutbox

---
 database/.htaccess | 2 ++
 index.php          | 6 +++---
 2 files changed, 5 insertions(+), 3 deletions(-)
 create mode 100644 database/.htaccess

diff --git a/database/.htaccess b/database/.htaccess
new file mode 100644
index 0000000..ff2beb8
--- /dev/null
+++ b/database/.htaccess
@@ -0,0 +1,2 @@
+order deny,allow
+deny from all
diff --git a/index.php b/index.php
index 0f07012..133a3cc 100644
--- a/index.php
+++ b/index.php
@@ -17,9 +17,9 @@ if ((include 'includes/shoutbox.inc') && $shoutbox = new Shoutbox('database/shou
 	/* __eintragen__ */
 
 	// wenn die Felder ausgefüllt wurden
-	if (!empty($_POST['message']) && !empty($_POST['sender'])) {
-		$shoutbox->add_entry($_POST['sender'], $_POST['message']);
-	}
+	// if (!empty($_POST['message']) && !empty($_POST['sender'])) {
+	// 	$shoutbox->add_entry($_POST['sender'], $_POST['message']);
+	// }
 
 
 	/* __auslesen__ */