punbb-1.2.11/upload/include/parser.php |
punbb-1.2.12/upload/include/parser.php |
264: { | 264: { |
265: global $pun_user; | 265: global $pun_user; |
266: | 266: |
267: $full_url = str_replace(array(' ', '\'', '`'), array('%20', '', ''), $url); | 267: $full_url = str_replace(array(' ', '\'', '`', '"'), array('%20', '', '', ''), $url); |
268: if (strpos($url, 'www.') === 0) // If it starts with www, we add http:// | 268: if (strpos($url, 'www.') === 0) // If it starts with www, we add http:// |
269: $full_url = 'http://'.$full_url; | 269: $full_url = 'http://'.$full_url; |
270: else if (strpos($url, 'ftp.') === 0) // Else if it starts with ftp, we add ftp:// | 270: else if (strpos($url, 'ftp.') === 0) // Else if it starts with ftp, we add ftp:// |
punbb-1.2.11/upload/login.php |
punbb-1.2.12/upload/login.php |
78: $expire = ($save_pass == '1') ? time() + 31536000 : 0; | 78: $expire = ($save_pass == '1') ? time() + 31536000 : 0; |
79: pun_setcookie($user_id, $form_password_hash, $expire); | 79: pun_setcookie($user_id, $form_password_hash, $expire); |
80: | 80: |
81: redirect($_POST['redirect_url'], $lang_login['Login redirect']); | 81: redirect(htmlspecialchars($_POST['redirect_url']), $lang_login['Login redirect']); |
82: } | 82: } |
83: | 83: |
84: | 84: |
punbb-1.2.11/upload/misc.php |
punbb-1.2.12/upload/misc.php |
120: | 120: |
121: pun_mail($recipient_email, $mail_subject, $mail_message, '"'.str_replace('"', '', $pun_user['username']).'" <'.$pun_user['email'].'>'); | 121: pun_mail($recipient_email, $mail_subject, $mail_message, '"'.str_replace('"', '', $pun_user['username']).'" <'.$pun_user['email'].'>'); |
122: | 122: |
123: redirect($_POST['redirect_url'], $lang_misc['E-mail sent redirect']); | 123: redirect(htmlspecialchars($_POST['redirect_url']), $lang_misc['E-mail sent redirect']); |
124: } | 124: } |
125: | 125: |
126: | 126: |
punbb-1.2.11/upload/userlist.php |
punbb-1.2.12/upload/userlist.php |
116: $where_sql[] = 'u.group_id='.$show_group; | 116: $where_sql[] = 'u.group_id='.$show_group; |
117: | 117: |
118: // Fetch user count | 118: // Fetch user count |
119: $result = $db->query('SELECT COUNT(id) FROM '.$db->prefix.'users AS u'.(!empty($where_sql) ? ' WHERE u.id>1 AND '.implode(' AND ', $where_sql) : '')) or error('Unable to fetch user list count', __FILE__, __LINE__, $db->error()); | 119: $result = $db->query('SELECT COUNT(id) FROM '.$db->prefix.'users AS u WHERE u.id>1'.(!empty($where_sql) ? ' AND '.implode(' AND ', $where_sql) : '')) or error('Unable to fetch user list count', __FILE__, __LINE__, $db->error()); |
120: $num_users = $db->result($result); | 120: $num_users = $db->result($result); |
121: | 121: |
122: | 122: |