Changes in trunk/client/modules.php [29:17]

File:

• trunk/client/modules.php (modified) (6 diffs)

trunk/client/modules.php

@@ -35 +35 @@
 
 foreach ($_GET as $sec_key => $secvalue) {
-    if ((preg_match("/<[^>]*script*\"?[^>]*>/i",$secvalue)) ||
-        (preg_match("/<[^>]*object*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*iframe*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*applet*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*meta*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*style*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*form*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*img*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*onmouseover*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/<[^>]*body*\"?[^>]*>/i", $secvalue)) ||
-        (preg_match("/\([^>]*\"?[^)]*\)/", $secvalue)) ||
-        (preg_match("/\"/", $secvalue)) ||
-        (preg_match("/inside_mod/i", $sec_key))) {
+    if ((preg_match('/<[^>]*script*\"?[^>]*>/i', $secvalue)) ||
+        (eregi("<[^>]*object*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*iframe*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*applet*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*meta*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*style*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*form*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*img*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*onmouseover*\"?[^>]*>", $secvalue)) ||
+        (eregi("<[^>]*body*\"?[^>]*>", $secvalue)) ||
+        (eregi("\([^>]*\"?[^)]*\)", $secvalue)) ||
+        (eregi("\"", $secvalue)) ||
+        (eregi("inside_mod", $sec_key))) {
         die ("Operazione non consentita");
      }
@@ -53 +53 @@
 
   foreach ($_POST as $secvalue) {
-    if ((preg_match("/<[^>]*onmouseover*\"?[^>]*>/i", $secvalue)) || (preg_match("/<[^>]script*\"?[^>]*>/i", $secvalue)) || (preg_match("/<[^>]*body*\"?[^>]*>/i", $secvalue)) || (preg_match("/<[^>]style*\"?[^>]*>/i", $secvalue))) {
+    if ((eregi("<[^>]*onmouseover*\"?[^>]*>", $secvalue)) || (eregi("<[^>]script*\"?[^>]*>", $secvalue)) || (eregi("<[^>]*body*\"?[^>]*>", $secvalue)) || (eregi("<[^>]style*\"?[^>]*>", $secvalue))) {
       die ($htmltags);
     }
@@ -74 +74 @@
 global $op,$name;
 if(!isset($_GET['js'])){
-$querystring= @preg_replace('/'.$_SERVER['DOCUMENT_ROOT'].'/i','http://'.$_SERVER['HTTP_HOST'].'/',$_SERVER['SCRIPT_FILENAME']);
-if (preg_match("/modules.php/i",$_SERVER['SCRIPT_NAME'])) $pagina="name=$name"; // reindirizza
-if (preg_match("/admin.php/i",$_SERVER['SCRIPT_NAME'])) $pagina="op=$op"; // reindirizza
+$querystring= @eregi_replace($_SERVER['DOCUMENT_ROOT'],'http://'.$_SERVER['HTTP_HOST'].'/',$_SERVER['SCRIPT_FILENAME']);
+if (eregi("modules.php",$_SERVER['SCRIPT_NAME'])) $pagina="name=$name"; // reindirizza
+if (eregi("admin.php",$_SERVER['SCRIPT_NAME'])) $pagina="op=$op"; // reindirizza
  echo "<noscript><meta http-equiv=\"refresh\" content=\"0; url=".$querystring."?js=b&amp;$pagina\"/></noscript>";
   }
@@ -104 +104 @@
 die("<center><img src=src=\"images/logo.gif\" target=\"Logo Avviso Errore\"><br/><br/><b>Ci sono dei problemi di connessione al DataBase $dbtype, chiediamo scusa per l'inconveniente.<br/><br/>Provate piu' tardi, Grazie.</b><br/><font color=\"#ff0000\">". mysql_error()."</font></center>");
 }
-mysql_query("SET NAMES 'utf8'", $dbi);
+mysql_set_charset('utf8', $dbi);
 
 # carica i parametri di default sulla tabella
@@ -210 +210 @@
         $tema=$param['tema'];
         $tema=htmlentities($tema); // evita xss
-        if(preg_match("/%/i", $tema)) $tema="default";// evita xss
+        if(eregi("%", $tema)) $tema="default";// evita xss
         $_SESSION['newtema']="$tema";
         }
-if (isset($_SESSION['newtema'])) {
-        $tema=$_SESSION['newtema']; 
-        if (preg_match("/%/i",$_SESSION['newtema'])) $_SESSION['newtema']="default"; // xss
-}
+
+if (eregi("%",$_SESSION['newtema'])) $_SESSION['newtema']="default"; // xss
+if (isset($_SESSION['newtema'])) $tema=$_SESSION['newtema']; 
+
 $PHP_SELF=$_SERVER['PHP_SELF'];
 $file=(isset($_GET['file'])) ? $_GET['file']:"index";
@@ -223 +223 @@
 $name=htmlentities($name); 
 $file=htmlentities($file); 
-#$id_comune=intval($id_comune); 
+$id_comune=intval($id_comune); 
 
 $modpath = "modules/$name/$file.php";