added improved check for controller method access so that CI does not attempt to load private or protected controller methods

added controller/method details to framework initiated 404 pages for logging

1 files changed, 5 insertions, 3 deletions

diff --git a/system/codeigniter/CodeIgniter.php b/system/codeigniter/CodeIgniter.php
index 8f9dbdf64..d1ef965cc 100644
--- a/system/codeigniter/CodeIgniter.php
+++ b/system/codeigniter/CodeIgniter.php
@@ -169,7 +169,7 @@ if ( ! class_exists($class)
 	OR in_array($method, get_class_methods('Controller'), TRUE)

 	)

 {

-	show_404();

+	show_404("{$class}/{$method}");

 }

 

 /*

@@ -214,9 +214,11 @@ else
 	}

 	else

 	{

-		if ( ! method_exists($CI, $method))

+		// is_callable() returns TRUE on some versions of PHP 5 for private and protected

+		// methods, so we'll use this workaround for consistent behavior

+		if (! in_array($method, get_class_methods($CI)))

 		{

-			show_404();

+			show_404("{$class}/{$method}");

 		}

 

 		// Call the requested method.