From 0cef61a3fd0c988cf46f5e45f7e06ab4e1a720d6 Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Mon, 23 Mar 2009 14:27:52 -0400 Subject: [PATCH] Added several input checks. --- interface/web/index.php | 140 +++++++++++++--------------------------------- 1 files changed, 40 insertions(+), 100 deletions(-) diff --git a/interface/web/index.php b/interface/web/index.php index 8ec46be..9c31282 100644 --- a/interface/web/index.php +++ b/interface/web/index.php @@ -1,101 +1,41 @@ -<?php - -/* -Copyright (c) 2007, Till Brehm, projektfarm Gmbh -All rights reserved. - -Redistribution and use in source and binary forms, with or without modification, -are permitted provided that the following conditions are met: - - * Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - * Redistributions in binary form must reproduce the above copyright notice, - this list of conditions and the following disclaimer in the documentation - and/or other materials provided with the distribution. - * Neither the name of ISPConfig nor the names of its contributors - may be used to endorse or promote products derived from this software without - specific prior written permission. - -THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND -ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED -WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. -IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, -INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, -BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, -DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY -OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING -NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, -EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. -*/ - -error_reporting(E_ALL|E_STRICT); - -require_once('../lib/config.inc.php'); -require_once('../lib/app.inc.php'); - -$app->uses('tpl'); -$app->tpl->newTemplate('main.tpl.htm'); - -/* - -// Checke User Login and current module -if(!is_array($_SESSION["s"]['user']) or !is_array($_SESSION["s"]["module"])) { - // Loading Login Module - include_once('login/lib/module.conf.php'); - $_SESSION["s"]['module'] = $module; - $topnav[] = array( 'title' => "Login", - 'active' => 1); - $module = null; - unset($module); -} else { - // Loading modules of the user and building top navigation - $modules = explode(',',$_SESSION["s"]["user"]["modules"]); - if(is_array($modules)) { - foreach($modules as $mt) { - if(is_file($mt."/lib/module.conf.php")) { - include_once($mt."/lib/module.conf.php"); - $active = ($module["name"] == $_SESSION["s"]["module"]["name"])?1:0; - $topnav[] = array( 'title' => $app->lng($module["title"]), - 'active' => $active, - 'module' => $module["name"]); - } - } - } -} - -// Topnavigation -$app->tpl->setLoop('nav_top',$topnav); - -// Loading Module part -$app->tpl->setInclude('module_tpl',$_SESSION["s"]["module"]["template"]); - -// translating module navigation -$nav_translated = array(); -if(is_array($_SESSION["s"]["module"]["nav"])) { - foreach($_SESSION["s"]["module"]["nav"] as $nav) { - $tmp_items = array(); - foreach($nav["items"] as $item) { - $item["title"] = $app->lng($item["title"]); - $tmp_items[] = $item; - } - $nav["title"] = $app->lng($nav["title"]); - $nav["items"] = $tmp_items; - $nav_translated[] = $nav; - } -} else { - $nav_translated = null; -} - -// Loading left navigation -//$app->tpl->setLoop('nav_left',$_SESSION["s"]["module"]["nav"]); -$app->tpl->setLoop('nav_left',$nav_translated); - -// Setting startpage -$app->tpl->setVar('startpage',$_SESSION["s"]["module"]["startpage"]); -$app->tpl->setVar('navframe_page',$_SESSION["s"]["module"]["navframe_page"]); - -*/ - -$app->tpl_defaults(); -$app->tpl->pparse(); +<?php + +/* +Copyright (c) 2007, Till Brehm, projektfarm Gmbh +All rights reserved. + +Redistribution and use in source and binary forms, with or without modification, +are permitted provided that the following conditions are met: + + * Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + * Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + * Neither the name of ISPConfig nor the names of its contributors + may be used to endorse or promote products derived from this software without + specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. +IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, +INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY +OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING +NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, +EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +*/ + +error_reporting(E_ALL|E_STRICT); + +require_once('../lib/config.inc.php'); +require_once('../lib/app.inc.php'); + +$app->uses('tpl'); +$app->tpl->newTemplate('main.tpl.htm'); + +$app->tpl_defaults(); +$app->tpl->pparse(); ?> \ No newline at end of file -- Gitblit v1.9.1