punbb-1.2.8/upload/include/common.php |
punbb-1.2.9/upload/include/common.php |
80: // Load the functions script | 80: // Load the functions script |
81: require PUN_ROOT.'include/functions.php'; | 81: require PUN_ROOT.'include/functions.php'; |
82: | 82: |
| 83: // Reverse the effect of register_globals |
| 84: if (@ini_get('register_globals')) |
| 85: unregister_globals(); |
| 86: |
| 87: |
83: // Load DB abstraction layer and connect | 88: // Load DB abstraction layer and connect |
84: require PUN_ROOT.'include/dblayer/common_db.php'; | 89: require PUN_ROOT.'include/dblayer/common_db.php'; |
85: | 90: |
punbb-1.2.8/upload/include/functions.php |
punbb-1.2.9/upload/include/functions.php |
1050: | 1050: |
1051: | 1051: |
1052: // | 1052: // |
| 1053: // Unset any variables instantiated as a result of register_globals being enabled |
| 1054: // |
| 1055: function unregister_globals() |
| 1056: { |
| 1057: // Prevent script.php?GLOBALS[foo]=bar |
| 1058: if (isset($_REQUEST['GLOBALS']) || isset($_FILES['GLOBALS'])) |
| 1059: exit('I\'ll have a steak sandwich and... a steak sandwich.'); |
| 1060: |
| 1061: // Variables that shouldn't be unset |
| 1062: $no_unset = array('GLOBALS', '_GET', '_POST', '_COOKIE', '_REQUEST', '_SERVER', '_ENV', '_FILES'); |
| 1063: |
| 1064: // Remove elements in $GLOBALS that are present in any of the superglobals |
| 1065: $input = array_merge($_GET, $_POST, $_COOKIE, $_SERVER, $_ENV, $_FILES, isset($_SESSION) && is_array($_SESSION) ? $_SESSION : array()); |
| 1066: foreach ($input as $k => $v) |
| 1067: { |
| 1068: if (!in_array($k, $no_unset) && isset($GLOBALS[$k])) |
| 1069: unset($GLOBALS[$k]); |
| 1070: } |
| 1071: } |
| 1072: |
| 1073: |
| 1074: // |
1053: // Dump contents of variable(s) | 1075: // Dump contents of variable(s) |
1054: // | 1076: // |
1055: function dump() | 1077: function dump() |
punbb-1.2.8/upload/search.php |
punbb-1.2.9/upload/search.php |
387: | 387: |
388: | 388: |
389: // Prune "old" search results | 389: // Prune "old" search results |
| 390: $old_searches = array(); |
390: $result = $db->query('SELECT ident FROM '.$db->prefix.'online') or error('Unable to fetch online list', __FILE__, __LINE__, $db->error()); | 391: $result = $db->query('SELECT ident FROM '.$db->prefix.'online') or error('Unable to fetch online list', __FILE__, __LINE__, $db->error()); |
391: | 392: |
392: if ($db->num_rows($result)) | 393: if ($db->num_rows($result)) |