| | |
|---|
| | | // make sure all <form> tags have a valid request token |
|---|
| | | $template = preg_replace_callback('/<form\s+([^>]+)>/Ui', array($this, 'alter_form_tag'), $template); |
|---|
| | | $this->footer = preg_replace_callback('/<form\s+([^>]+)>/Ui', array($this, 'alter_form_tag'), $this->footer); |
|---|
| | | |
|---|
| | | // send clickjacking protection headers |
|---|
| | | $iframe = $this->framed || !empty($_REQUEST['_framed']); |
|---|
| | | if (!headers_sent() && ($xframe = $this->app->config->get('x_frame_options', 'sameorigin'))) |
|---|
| | | header('X-Frame-Options: ' . ($iframe && $xframe == 'deny' ? 'sameorigin' : $xframe)); |
|---|
| | | |
|---|
| | | // call super method |
|---|
| | | parent::write($template, $this->config['skin_path']); |
|---|
| | |
|---|
| | | |
|---|
| | | if ($write) { |
|---|
| | | // add debug console |
|---|
| | | if ($this->config['debug_level'] & 8) { |
|---|
| | | if ($realname != 'error' && ($this->config['debug_level'] & 8)) { |
|---|
| | | $this->add_footer('<div id="console" style="position:absolute;top:5px;left:5px;width:405px;padding:2px;background:white;z-index:9000;display:none"> |
|---|
| | | <a href="#toggle" onclick="con=$(\'#dbgconsole\');con[con.is(\':visible\')?\'hide\':\'show\']();return false">console</a> |
|---|
| | | <textarea name="console" id="dbgconsole" rows="20" cols="40" wrap="off" style="display:none;width:400px;border:none;font-size:10px" spellcheck="false"></textarea></div>' |
|---|
