mirror of
https://github.com/phpbb/phpbb.git
synced 2025-06-08 04:18:52 +00:00
Stop being too paranoid about hacking of includes containing only fully inclusive functions
git-svn-id: file:///svn/phpbb/trunk@2328 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
parent
812d5a2f35
commit
b651274960
19 changed files with 21 additions and 91 deletions
|
@ -20,11 +20,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
/*
|
||||
$type's accepted (pre-pend with AUTH_):
|
||||
VIEW, READ, POST, REPLY, EDIT, DELETE, STICKY, ANNOUNCE, VOTE, VOTECREATE,
|
||||
|
|
|
@ -19,11 +19,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
//
|
||||
// The emailer class has support for attaching files, that isn't implemented
|
||||
// in the 2.0 release but we can probable find some way of using it in a future
|
||||
|
@ -332,4 +327,4 @@ class emailer
|
|||
|
||||
} // class emailer
|
||||
|
||||
?>
|
||||
?>
|
|
@ -21,11 +21,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
function get_db_stat($mode)
|
||||
{
|
||||
global $db;
|
||||
|
|
|
@ -21,11 +21,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
//
|
||||
// Simple version of jumpbox, just lists authed forums
|
||||
//
|
||||
|
|
|
@ -19,11 +19,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
function clean_words($mode, &$entry, &$stopword_list, &$synonym_list)
|
||||
{
|
||||
// Weird, $init_match doesn't work with static when double quotes (") are used...
|
||||
|
|
|
@ -21,11 +21,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
//
|
||||
// Pick a language, any language ...
|
||||
//
|
||||
|
|
|
@ -21,11 +21,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
//
|
||||
// Check to see if the username has been taken, or if it is disallowed.
|
||||
// Also checks if it includes the " character, which we don't allow in usernames.
|
||||
|
|
|
@ -20,11 +20,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
require($phpbb_root_path . 'includes/functions_search.'.$phpEx);
|
||||
|
||||
function prune($forum_id, $prune_date)
|
||||
|
|
|
@ -20,11 +20,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
//
|
||||
// session_begin()
|
||||
//
|
||||
|
|
|
@ -19,11 +19,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
define('SMTP_INCLUDED', 1);
|
||||
//
|
||||
// This function has been modified as provided
|
||||
|
@ -233,4 +228,4 @@ function smtpmail($mail_to, $subject, $message, $headers = "")
|
|||
return TRUE;
|
||||
}
|
||||
|
||||
?>
|
||||
?>
|
|
@ -28,11 +28,6 @@
|
|||
*
|
||||
\***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
//
|
||||
// remove_comments will strip the sql comment lines out of an uploaded sql file
|
||||
// specifically for mssql and postgres type files in the install....
|
||||
|
@ -67,6 +62,7 @@ function remove_comments(&$output)
|
|||
unset($lines);
|
||||
return $output;
|
||||
}
|
||||
|
||||
//
|
||||
// remove_remarks will strip the sql comment lines out of an uploaded sql file
|
||||
//
|
||||
|
@ -192,4 +188,5 @@ function split_sql_file($sql, $delimiter)
|
|||
|
||||
return $output;
|
||||
}
|
||||
?>
|
||||
|
||||
?>
|
|
@ -20,11 +20,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
/**
|
||||
* Template class. By Nathan Codding of the phpBB group.
|
||||
* The interface was originally inspired by PHPLib templates,
|
||||
|
|
|
@ -21,15 +21,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
}
|
||||
|
||||
// -----------------------
|
||||
// Page specific functions
|
||||
//
|
||||
|
||||
function topic_review($topic_id, $is_inline_review)
|
||||
{
|
||||
global $db, $board_config, $template, $lang, $images, $theme, $phpEx, $phpbb_root_path;
|
||||
|
@ -216,8 +207,5 @@ function topic_review($topic_id, $is_inline_review)
|
|||
include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
|
||||
}
|
||||
}
|
||||
//
|
||||
// End page specific functions
|
||||
// ---------------------------
|
||||
|
||||
?>
|
|
@ -21,7 +21,7 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PROFILE') )
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
exit;
|
||||
|
|
|
@ -21,12 +21,6 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PROFILE') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
exit;
|
||||
}
|
||||
|
||||
function check_image_type(&$type, &$error, &$error_msg)
|
||||
{
|
||||
global $lang;
|
||||
|
|
|
@ -21,7 +21,7 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PROFILE') )
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
exit;
|
||||
|
|
|
@ -21,7 +21,7 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PROFILE') )
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
exit;
|
||||
|
@ -476,20 +476,26 @@ if ( isset($HTTP_POST_VARS['submit']) )
|
|||
FROM " . USERS_TABLE;
|
||||
if ( !($result = $db->sql_query($sql)) )
|
||||
{
|
||||
message_die(GENERAL_ERROR, 'Could not obtained next user_id information', '', __LINE__, __FILE__, $sql);
|
||||
message_die(GENERAL_ERROR, 'Could not obtain next user_id information', '', __LINE__, __FILE__, $sql);
|
||||
}
|
||||
|
||||
$row = $db->sql_fetchrow($result);
|
||||
if ( !($row = $db->sql_fetchrow($result) )
|
||||
{
|
||||
message_die(GENERAL_ERROR, 'Could not obtain next user_id information', '', __LINE__, __FILE__, $sql);
|
||||
}
|
||||
$user_id = $row['total'] + 1;
|
||||
|
||||
$sql = "SELECT MAX(group_id) AS total
|
||||
FROM " . GROUPS_TABLE;
|
||||
if (!( $result = $db->sql_query($sql)) )
|
||||
if ( !($result = $db->sql_query($sql) ) )
|
||||
{
|
||||
message_die(GENERAL_ERROR, 'Could not obtained next user_id information', '', __LINE__, __FILE__, $sql);
|
||||
message_die(GENERAL_ERROR, 'Could not obtain next user_id information', '', __LINE__, __FILE__, $sql);
|
||||
}
|
||||
|
||||
$row = $db->sql_fetchrow($result);
|
||||
if ( !($row = $db->sql_fetchrow($result) )
|
||||
{
|
||||
message_die(GENERAL_ERROR, 'Could not obtain next user_id information', '', __LINE__, __FILE__, $sql);
|
||||
}
|
||||
$group_id = $row['total'] + 1;
|
||||
|
||||
//
|
||||
|
|
|
@ -21,7 +21,7 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PROFILE') )
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
exit;
|
||||
|
|
|
@ -21,7 +21,7 @@
|
|||
*
|
||||
***************************************************************************/
|
||||
|
||||
if ( !defined('IN_PROFILE') )
|
||||
if ( !defined('IN_PHPBB') )
|
||||
{
|
||||
die("Hacking attempt");
|
||||
exit;
|
||||
|
|
Loading…
Add table
Reference in a new issue