/ - Diff - WB 2.08.x - Tracking

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Create admin object
     require('../../config.php');
     require_once(WB_PATH.'/framework/class.admin.php');
     $admin = new admin('Media', 'media_rename', false);
     if (!$admin->checkFTAN())
+    {
     	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Include the WB functions file
     require_once(WB_PATH.'/framework/functions.php');
     // Get list of file types to which we're supposed to append 'txt'
     $get_result=$database->query("SELECT value FROM ".TABLE_PREFIX."settings WHERE name='rename_files_on_upload' LIMIT 1");
     $file_extension_string='';
     $get_result = $database->query("SELECT value FROM ".TABLE_PREFIX."settings WHERE name='rename_files_on_upload' LIMIT 1");
     $file_extension_string = '';
     if ($get_result->numRows()>0) {
     	$fetch_result=$get_result->fetchRow();
     	$file_extension_string=$fetch_result['value'];
     	$fetch_result = $get_result->fetchRow();
     	$file_extension_string = $fetch_result['value'];
+    }
     $file_extensions=explode(",",$file_extension_string);
     // Get the current dir
     $directory = $admin->get_post('dir');
     if($directory == '/') {
     	$directory = '';
+    }
     // Check to see if it contains ../
     if(strstr($directory, '../')) {
     // Check to see if it contains ..
     if (!check_media_path($directory)) {
     	$admin->print_header();
     	$admin->print_error($MESSAGE['MEDIA']['DIR_DOT_DOT_SLASH']);
+    }
     // Get the temp id
     if(!is_numeric($admin->get_post('id'))) {
     	header("Location: browse.php?dir=$directory");
     	exit(0);
     } else {
     	$file_id = $admin->get_post('id');
     $file_id = $admin->checkIDKEY('id', false, 'POST');
     if (!$file_id) {
     	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
+    }
     // Get home folder not to show

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     require('../../config.php');
     require_once(WB_PATH.'/framework/class.admin.php');
     $admin = new admin('Media', 'media', false);
-...
     //Save post vars to the parameters file
     if ( !is_null($admin->get_post_escaped("save"))) {
     	if (!$admin->checkFTAN())
+    	{
     		$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     		exit();
+    	}
     	//Check for existing settings entry, if not existing, create a record first!
     	if (!$database->query ( "SELECT * FROM ".TABLE_PREFIX."settings where `name`='mediasettings'" )) {
     		$database->query ( "INSERT INTO ".TABLE_PREFIX."settings (`name`,`value`) VALUES ('mediasettings','')" );
-...
     $template->set_var(array(
     					'TEXT_HEADER' => $TEXT['TEXT_HEADER'],
     					'SAVE_TEXT' => $TEXT['SAVE'],
     					'BACK' => $TEXT['BACK']
     					'BACK' => $TEXT['BACK'],
+    				)
     			);
-...
     								'ADMIN_ONLY_SELECTED' => $pathsettings['global']['admin_only'],
     								'NO_SHOW_THUMBS' => $TEXT['NO_SHOW_THUMBS'],
     								'NO_SHOW_THUMBS_SELECTED' => $pathsettings['global']['show_thumbs'],
     								'ROW_BG_COLOR' => $row_bg_color
     								'ROW_BG_COLOR' => $row_bg_color,
     								'FTAN' => $admin->getFTAN()
+    							)
     					);
     	$template->parse('list', 'list_block', true);

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     	/**
     	 * Image Resizer.
     	 * @author : Harish Chauhan

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     require('../../config.php');
     include_once('resize_img.php');
     require_once(WB_PATH.'/framework/functions.php');
     if (isset($_GET['img']) && isset($_GET['t'])) {
     	$image = addslashes($_GET['img']);
     	// Check to see if it contains ..
     	if (!check_media_path($image)) {
     		$admin->print_error($MESSAGE['MEDIA']['DIR_DOT_DOT_SLASH'], WB_URL, false);
+    	}
     	$type = addslashes($_GET['t']);
     	$media = WB_PATH.MEDIA_DIRECTORY;
     	$img=new RESIZEIMAGE($media.$image);

     <?php
     /**
+     *
      * @category        admin
      * @package         media
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Create admin object
     require('../../config.php');
     require_once(WB_PATH.'/framework/class.admin.php');
-...
+    }
     // Check to see if it contains ../
     if(strstr($directory, '../')) {
     if (!check_media_path($directory)) {
     	$admin->print_header();
     	$admin->print_error($MESSAGE['MEDIA']['DIR_DOT_DOT_SLASH']);
+    }
-...
     			$template->set_var(array(
     											'NAME' => $name,
     											'NAME_SLASHED' => addslashes($name),
     											'TEMP_ID' => $temp_id,
     											'TEMP_ID' => $admin->getIDKEY($temp_id),
     											'LINK' => "browse.php?dir=$directory/$link_name",
     											'LINK_TARGET' => '',
     											'ROW_BG_COLOR' => $row_bg_color,
-...
     			$template->set_var(array(
     											'NAME' => $name,
     											'NAME_SLASHED' => addslashes($name),
     											'TEMP_ID' => $temp_id,
     											'TEMP_ID' => $admin->getIDKEY($temp_id),
     											'LINK' => WB_URL.MEDIA_DIRECTORY.$directory.'/'.$name,
     											'LINK_TARGET' => '_blank',
     											'ROW_BG_COLOR' => $row_bg_color,

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Create admin object
     require('../../config.php');
     require_once(WB_PATH.'/framework/class.admin.php');
-...
     if($directory == '/') {
     	$directory = '';
+    }
     // Check to see if it contains ../
     if(strstr($directory, '../')) {
     // Check to see if it contains ..
     if (!check_media_path($directory)) {
     	$admin->print_header();
     	$admin->print_error($MESSAGE['MEDIA']['DOT_DOT_SLASH']);
+    }
     // Get the temp id
     if(!is_numeric($admin->get_get('id'))) {
     	header("Location: browse.php?dir=$directory");
     	exit(0);
     } else {
     	$file_id = $admin->get_get('id');
     $file_id = $admin->checkIDKEY('id', false, 'GET');
     if (!$file_id) {
     	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
+    }
     // Get home folder not to show

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Get dir name and target location
     if(!isset($_POST['name']) OR $_POST['name'] == '') {
     	header("Location: index.php");
-...
     require_once(WB_PATH.'/framework/class.admin.php');
     $admin = new admin('Media', 'media_create');
     if (!$admin->checkFTAN())
+    {
     	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Include the WB functions file
     require_once(WB_PATH.'/framework/functions.php');
     // Check to see if name or target contains ../
     if(strstr($name, '../')) {
     if(strstr($name, '..')) {
     	$admin->print_error($MESSAGE['MEDIA']['NAME_DOT_DOT_SLASH']);
+    }
     if(strstr($target, '../')) {
     if (!check_media_path($target, false)) {
     	w_debug("target: $target");
     	$admin->print_error($MESSAGE['MEDIA']['TARGET_DOT_DOT_SLASH']);
+    }

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     function __unserialize($sObject) {  // found in php manual :-)
     	$__ret =preg_replace('!s:(\d+):"(.*?)";!e', "'s:'.strlen('$2').':\"$2\";'", $sObject );
     	return unserialize($__ret);

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Target location
     if(!isset($_POST['target']) OR $_POST['target'] == '') {
     	header("Location: index.php");
-...
     require_once(WB_PATH.'/include/pclzip/pclzip.lib.php');	// Required to unzip file.
     $admin = new admin('Media', 'media_upload');
     if (!$admin->checkFTAN())
+    {
     	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Include the WB functions file
     require_once(WB_PATH.'/framework/functions.php');
     // Check to see if target contains ../
     if(strstr($target, '../')) {
     if (!check_media_path($target, false)) {
     	$admin->print_error($MESSAGE['MEDIA']['TARGET_DOT_DOT_SLASH']);
+    }

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Print admin header
     require('../../config.php');
     require_once(WB_PATH.'/framework/class.admin.php');
-...
     								'CHANGE_SETTINGS' => $TEXT['MODIFY_SETTINGS'],
     								'OPTIONS' => $TEXT['OPTION'],
     								'TEXT_UNZIP_FILE' => $TEXT['UNZIP_FILE'],
     								'TEXT_DELETE_ZIP' => $TEXT['DELETE_ZIP']
     								'TEXT_DELETE_ZIP' => $TEXT['DELETE_ZIP'],
     								'FTAN' => $admin->getFTAN()
+    								)
     						);

     <?php
     /**
+     *
      * @category        admin
      * @package         admintools
      * @author          WebsiteBaker Project
      * @copyright       2004-2009, Ryan Djurovich
      * @copyright       2009-2011, Website Baker Org. e.V.
      * @link			http://www.websitebaker2.org/
      * @license         http://www.gnu.org/licenses/gpl.html
      * @platform        WebsiteBaker 2.8.x
      * @requirements    PHP 5.2.2 and higher
      * @version         $Id$
      * @filesource		$HeadURL:  $
      * @lastmodified    $Date:  $
+     *
      */
     // $Id$
     /*
      Website Baker Project <http://www.websitebaker.org/>
      Copyright (C) 2004-2009, Ryan Djurovich
      Website Baker is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public License as published by
      the Free Software Foundation; either version 2 of the License, or
      (at your option) any later version.
      Website Baker is distributed in the hope that it will be useful,
      but WITHOUT ANY WARRANTY; without even the implied warranty of
      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      GNU General Public License for more details.
      You should have received a copy of the GNU General Public License
      along with Website Baker; if not, write to the Free Software
      Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
     */
     // Create admin object
     require('../../config.php');
     require_once(WB_PATH.'/framework/class.admin.php');
-...
     if($directory == '/') {
     	$directory = '';
+    }
     // Check to see if it contains ../
     if(strstr($directory, '../')) {
     	$admin->print_error($MESSAGE['MEDIA']['DIR_DOT_DOT_SLASH'], "rename.php?dir=$directory&id=$file_id", false);
     // Check to see if it contains ..
     if (!check_media_path($directory)) {
     	$admin->print_error($MESSAGE['MEDIA']['DIR_DOT_DOT_SLASH'], WB_URL, false);
+    }
     // Get the temp id
     if(!is_numeric($admin->get_get('id'))) {
     	header("Location: browse.php?dir=$directory");
     	exit(0);
     } else {
     	$file_id = $admin->get_get('id');
     $file_id = $admin->checkIDKEY('id', false, 'GET');
     if (!$file_id) {
     	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
+    }
     // Get home folder not to show
-...
     								'THEME_URL' => THEME_URL,
     								'FILENAME' => $rename_file,
     								'DIR' => $directory,
     								'FILE_ID' => $file_id,
     								'FILE_ID' => $admin->getIDKEY($file_id),
     								'TYPE' => $type,
     								'EXTENSION' => $extension
     								'EXTENSION' => $extension,
     								'FTAN' => $admin->getFTAN()
+    								)
     						);

branches/2.8.x/wb/admin/interface/version.php
52	52
53	53	// check if defined to avoid errors during installation (redirect to admin panel fails if PHP error/warnings are enabled)
54	54	if(!defined('VERSION')) define('VERSION', '2.8.2.RC5');
55		if(!defined('REVISION')) define('REVISION', '1399');
	55	if(!defined('REVISION')) define('REVISION', '1400');
56	56
57	57	?>

     $new_password = $_POST['new_password'];
     $new_password2 = $_POST['new_password2'];
     if (!$wb->checkFTAN())
+    {
     	$wb->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Create a javascript back link
     $js_back = "javascript: history.go(-1);";
-...
     	$wb->print_success($MESSAGE['PREFERENCES']['PASSWORD_CHANGED'], WB_URL.'/account/preferences.php');
+    }
     ?>

      */
     if(!defined('WB_URL')) die(header('Location: ../../index.php'));
     $ftan = $wb->getFTAN();
     ?>
     <h2>&nbsp;<?php print $HEADING['MY_SETTINGS']; ?></h2>
     <form name="user" action="<?php print WB_URL.'/account/preferences.php'; ?>" method="post" style="margin-bottom: 5px;">
     <input type="hidden" name="user_id" value="{USER_ID}" />
     <?php echo $ftan; ?>
     <table cellpadding="5" cellspacing="0" border="0" width="97%">
     <tr>
     	<td width="140"><?php print $TEXT['DISPLAY_NAME']; ?>:</td>
-...
     <form name="email" action="<?php print WB_URL.'/account/preferences.php'; ?>" method="post" style="margin-bottom: 5px;">
     <input type="hidden" name="user_id" value="{USER_ID}" />
     <?php echo $ftan; ?>
     <table cellpadding="5" cellspacing="0" border="0" width="97%">
     <tr>
     	<td width="140"><?php print $TEXT['CURRENT_PASSWORD']; ?>:</td>
-...
     <form name="user" action="<?php print WB_URL.'/account/preferences.php'; ?>" method="post">
     <input type="hidden" name="user_id" value="{USER_ID}" />
     <?php echo $ftan; ?>
     <table cellpadding="5" cellspacing="0" border="0" width="97%">
     <tr>
     	<td width="140"><?php print $TEXT['CURRENT_PASSWORD']; ?>:</td>

     $date_format = $wb->get_post_escaped('date_format');
     $time_format = $wb->get_post_escaped('time_format');
     if (!$wb->checkFTAN())
+    {
     	$wb->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Create a javascript back link
     $js_back = "javascript: history.go(-1);";

     $current_password = $wb->get_post('current_password');
     $email = $wb->get_post('email');
     if (!$wb->checkFTAN())
+    {
     	$wb->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Create a javascript back link
     $js_back = "javascript: history.go(-1);";

     $display_name = strip_tags($wb->get_post_escaped('display_name'));
     $email = $wb->get_post('email');
     if (!$wb->checkFTAN())
+    {
     	$wb->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], WB_URL);
     	exit();
+    }
     // Create a javascript back link
     $js_back = "javascript: history.go(-1);";

     <h1>&nbsp;<?php echo $TEXT['SIGNUP']; ?></h1>
     <form name="user" action="<?php echo WB_URL.'/account/signup.php'; ?>" method="post">
     	<?php echo $admin->getFTAN(); ?>
     	<?php if(ENABLED_ASP) { // add some honeypot-fields
     	?>
         <div style="display:none;">

     		return $retval;
+    	}
     /*
      * filter directory traversal more thoroughly, thanks to hal 9000
      * @param string $dir: directory relative to MEDIA_DIRECTORY
      * @param bool $with_media_dir: true when to include MEDIA_DIRECTORY
      * @return: false if directory traversal detected, real path if not
      */
     	function check_media_path($directory, $with_media_dir = true)
+    	{
     		$md = ($with_media_dir) ? MEDIA_DIRECTORY : '';
     		$dir = realpath(WB_PATH . $md . '/' . utf8_decode($directory));
     		$required = realpath(WB_PATH . MEDIA_DIRECTORY);
     		if (strstr($dir, $required)) {
     			return $dir;
     		} else {
     			return false;
+    		}
+    	}

     <input type="hidden" name="dir" value="{DIR}" />
     <input type="hidden" name="old_name" value="{FILENAME}" />
     <input type="hidden" name="id" value="{FILE_ID}" />
     {FTAN}
     <table cellpadding="5" cellspacing="0" border="0" width="400" align="center">
     <tr>
     	<td align="center" colspan="2">{TEXT_RENAME} '{FILENAME}' {TEXT_TO}:</td>

     <iframe width="100%" height="382px" src="browse.php" scrolling="no"></iframe>
     <br />
     <form name="create" action="create.php" method="post" class="{DISPLAY_CREATE}">
     {FTAN}
     <h2>{HEADING_CREATE_FOLDER}</h2>
     <table cellpadding="3" cellspacing="0" border="0" width="100%">
-...
     </form>
     <form name="upload" action="upload.php" method="post" enctype="multipart/form-data" class="{DISPLAY_UPLOAD}">
     {FTAN}
     <br />
     <h2>{HEADING_UPLOAD_FILES}</h2>

     </tr>
     </table>
     <form method="post" action="{ADMIN_URL}/media/setparameter.php">
     	{FTAN}
     <table cellpadding="4" cellspacing="0" border="0" width="100%" class="{DISPLAY_LIST_TABLE}">
     	<tr><td>{SETTINGS}</td><td><input type="checkbox" name="show_thumbs" {NO_SHOW_THUMBS_SELECTED}> {NO_SHOW_THUMBS}</td></tr>
     	<tr class="{DISPLAY_ADMIN}"><td></td>&nbsp;<td><input type="checkbox" name="admin_only" {ADMIN_ONLY_SELECTED}> {ADMIN_ONLY}</td></tr>
-...
     		<td><input type="submit" name="save" value="{SAVE_TEXT}"></td>
     	</tr>
     </table>
     </form>
     </body>
     </html>

     <input type="hidden" name="dir" value="{DIR}" />
     <input type="hidden" name="old_name" value="{FILENAME}" />
     <input type="hidden" name="id" value="{FILE_ID}" />
     {FTAN}
     <table cellpadding="5" cellspacing="0" border="0" width="400" align="center">
     <tr>
     	<td align="center" colspan="2">{TEXT_RENAME} '{FILENAME}' {TEXT_TO}:</td>

         <td width="300" valign="top" align="left">
     	<h2>{HEADING_UPLOAD_FILES}</h2>
           <form name="upload" action="upload.php" method="post" enctype="multipart/form-data" class="{DISPLAY_UPLOAD}">
             <table cellpadding="3" cellspacing="0" border="0" width="100%">
     		{FTAN}
     		<table cellpadding="3" cellspacing="0" border="0" width="100%">
               <tr>
                 <td>{TEXT_TARGET_FOLDER}:<br />
                   <select name="target" style="width:100%;"
-...
           <div class="show">
     	  <br /><br />
             <form name="create" action="create.php" method="post" class="{DISPLAY_CREATE}">
     		{FTAN}
               <h2>{HEADING_CREATE_FOLDER}</h2>
               <table cellpadding="3" cellspacing="0" border="0" width="100%">
                 <tr>

Project

General

Profile

WB 2.08.x

Revision 1400

Added by FrankH over 13 years ago