david
790d6f170a
git-svn-id: https://192.168.0.254/svn/Proyectos.MatritumCantat_Web/trunk@2 8e3496fd-7892-4c45-be36-0ff06e9dacc6
146 lines
3.7 KiB
PHP
146 lines
3.7 KiB
PHP
<?php
|
|
/**
|
|
* @version $Id: globals.php 7424 2007-05-17 15:56:10Z robs $
|
|
* @package Joomla
|
|
* @copyright Copyright (C) 2005 Open Source Matters. All rights reserved.
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL, see LICENSE.php
|
|
* Joomla! is free software and parts of it may contain or be derived from the
|
|
* GNU General Public License or other free or open source software licenses.
|
|
* See COPYRIGHT.php for copyright notices and details.
|
|
*/
|
|
|
|
// no direct access
|
|
defined( '_VALID_MOS' ) or die( 'Restricted access' );
|
|
|
|
/**
|
|
* Register Globals Emulation is no longer configured
|
|
* in this file. It is not configured via Joomla!'s
|
|
* Global Configuration screen in the Administrator site.
|
|
*/
|
|
if( defined( 'RG_EMULATION' ) === false ) {
|
|
if( file_exists( dirname(__FILE__).'/configuration.php' ) ) {
|
|
require( dirname(__FILE__).'/configuration.php' );
|
|
}
|
|
|
|
if( defined( 'RG_EMULATION' ) === false ) {
|
|
// The configuration file is old so default to on
|
|
define( 'RG_EMULATION', 1 );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Adds an array to the GLOBALS array and checks that the GLOBALS variable is
|
|
* not being attacked
|
|
* @param array
|
|
* @param boolean True if the array is to be added to the GLOBALS
|
|
*/
|
|
function checkInputArray( &$array, $globalise=false ) {
|
|
static $banned = array( '_files', '_env', '_get', '_post', '_cookie', '_server', '_session', 'globals' );
|
|
|
|
foreach ($array as $key => $value) {
|
|
$intval = intval( $key );
|
|
// PHP GLOBALS injection bug
|
|
$failed = in_array( strtolower( $key ), $banned );
|
|
// PHP Zend_Hash_Del_Key_Or_Index bug
|
|
$failed |= is_numeric( $key );
|
|
if ($failed) {
|
|
die( 'Illegal variable <b>' . implode( '</b> or <b>', $banned ) . '</b> passed to script.' );
|
|
}
|
|
if ($globalise) {
|
|
$GLOBALS[$key] = $value;
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Emulates register globals = off
|
|
*/
|
|
function unregisterGlobals () {
|
|
checkInputArray( $_FILES );
|
|
checkInputArray( $_ENV );
|
|
checkInputArray( $_GET );
|
|
checkInputArray( $_POST );
|
|
checkInputArray( $_COOKIE );
|
|
checkInputArray( $_SERVER );
|
|
|
|
if (isset( $_SESSION )) {
|
|
checkInputArray( $_SESSION );
|
|
}
|
|
|
|
$REQUEST = $_REQUEST;
|
|
$GET = $_GET;
|
|
$POST = $_POST;
|
|
$COOKIE = $_COOKIE;
|
|
if (isset ( $_SESSION )) {
|
|
$SESSION = $_SESSION;
|
|
}
|
|
$FILES = $_FILES;
|
|
$ENV = $_ENV;
|
|
$SERVER = $_SERVER;
|
|
foreach ($GLOBALS as $key => $value) {
|
|
if ( $key != 'GLOBALS' ) {
|
|
unset ( $GLOBALS [ $key ] );
|
|
}
|
|
}
|
|
$_REQUEST = $REQUEST;
|
|
$_GET = $GET;
|
|
$_POST = $POST;
|
|
$_COOKIE = $COOKIE;
|
|
if (isset ( $SESSION )) {
|
|
$_SESSION = $SESSION;
|
|
}
|
|
$_FILES = $FILES;
|
|
$_ENV = $ENV;
|
|
$_SERVER = $SERVER;
|
|
}
|
|
|
|
/**
|
|
* Emulates register globals = on
|
|
*/
|
|
function registerGlobals() {
|
|
checkInputArray( $_FILES, true );
|
|
checkInputArray( $_ENV, true );
|
|
checkInputArray( $_GET, true );
|
|
checkInputArray( $_POST, true );
|
|
checkInputArray( $_COOKIE, true );
|
|
checkInputArray( $_SERVER, true );
|
|
|
|
if (isset( $_SESSION )) {
|
|
checkInputArray( $_SESSION, true );
|
|
}
|
|
|
|
foreach ($_FILES as $key => $value){
|
|
$GLOBALS[$key] = $_FILES[$key]['tmp_name'];
|
|
foreach ($value as $ext => $value2){
|
|
$key2 = $key . '_' . $ext;
|
|
$GLOBALS[$key2] = $value2;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (RG_EMULATION == 0) {
|
|
// force register_globals = off
|
|
unregisterGlobals();
|
|
|
|
if( file_exists( dirname(__FILE__).'/configuration.php' ) ) {
|
|
require( dirname(__FILE__).'/configuration.php' );
|
|
}
|
|
} else if (ini_get('register_globals') == 0) {
|
|
// php.ini has register_globals = off and emulate = on
|
|
registerGlobals();
|
|
} else {
|
|
// php.ini has register_globals = on and emulate = on
|
|
// just check for spoofing
|
|
checkInputArray( $_FILES );
|
|
checkInputArray( $_ENV );
|
|
checkInputArray( $_GET );
|
|
checkInputArray( $_POST );
|
|
checkInputArray( $_COOKIE );
|
|
checkInputArray( $_SERVER );
|
|
|
|
if (isset( $_SESSION )) {
|
|
checkInputArray( $_SESSION );
|
|
}
|
|
}
|
|
|
|
?>
|