add a quick hack for XSS protection

1 files changed, 9 insertions, 0 deletions

diff --git a/index.php b/index.php
index 1148b1d..ad16995 100644
--- a/index.php
+++ b/index.php
@@ -2,6 +2,15 @@
 // What directory are we in on the server.
 define('BASEPATH', dirname(__FILE__));
 
+$xss_file = BASEPATH.'/xss-check.php';
+if (file_exists($xss_file)) {
+	require($xss_file);
+	if (xss_attack()) {
+		echo "execution halted to prevent XSS attack.";
+		exit();
+	}
+}
+
 // Decide where to look for things
 define('LIBPATH',        BASEPATH.'/src/lib'.PATH_SEPARATOR.BASEPATH.'/src/ext');
 define('MODELPATH',      BASEPATH.'/src/models');