Added proper 404 errors on file or directory not found

[bizou.git] / view.php

diff --git a/view.php b/view.php
index 33b935f..1f98767 100644 (file)
--- a/view.php
+++ b/view.php
@@ -24,6 +24,11 @@ if ($shortPath == '/') $shortPath = '';
 // extra security check to avoid /photos/index/../.. like urls, maybe useless but..
 if (strpos($shortPath, '..') !== false) die(".. found in url");
 
+if (! is_file(IMAGES_DIR.$shortPath)) {
+       header("HTTP/1.1 404 Not Found");
+       die("File Not Found");
+}
+
 $scriptPath = $_SERVER["SCRIPT_NAME"];
 
 // get all images in an array