From 23397268a0b9069d65bdc5ba3c26fafa0fe2b8e6 Mon Sep 17 00:00:00 2001
From: glix08 <glix08@a8ac35ab-4ca4-ca47-4c2d-a49a94f06293>
Date: Sat, 30 Jun 2012 20:42:04 +0000
Subject: [PATCH] r437
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Защита от открытия сайта во фрейме и последующего увода паролей. Спасибо rutracker.org за идею. git-svn-id: https://torrentpier2.googlecode.com/svn/trunk@437 a8ac35ab-4ca4-ca47-4c2d-a49a94f06293
---
 upload/config.php                        |  4 ++--
 upload/templates/default/page_header.tpl | 11 +++++++++++
 2 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/upload/config.php b/upload/config.php
index 9ef14aa40..780f88ffb 100644
--- a/upload/config.php
+++ b/upload/config.php
@@ -56,8 +56,8 @@ $domain_name = (!empty($_SERVER['SERVER_NAME'])) ? $_SERVER['SERVER_NAME'] : $do
 
 // Increase number of revision after update
 $bb_cfg['tp_version'] = '2.5 Beta';
-$bb_cfg['tp_release_state'] = 'R436';
-$bb_cfg['tp_release_date'] = '27-06-2012';
+$bb_cfg['tp_release_state'] = 'R437';
+$bb_cfg['tp_release_date'] = '01-07-2012';
 
 // Database
 $charset  = 'utf8';
diff --git a/upload/templates/default/page_header.tpl b/upload/templates/default/page_header.tpl
index a91ba855c..52b9590bc 100644
--- a/upload/templates/default/page_header.tpl
+++ b/upload/templates/default/page_header.tpl
@@ -307,6 +307,17 @@ function go_to_page ()
 <!-- ELSE -->
 <!--======-->
 
+<script type="text/javascript">
+if (top != self) {
+	allowed_self = /^(translate\.googleusercontent\.com)$/;
+	if (!self.location.hostname.match(allowed_self)) {
+		$(function(){
+			$('body').html('<center><h1><br /><br />Похоже вас пытаются обмануть<br />Сайт '+ self.location.hostname +' открыт во фрейме</h1></center>');
+		});
+	}
+}
+</script>
+
 <!--page_container-->
 <div id="page_container">
 <a name="top"></a>