Project

General

Profile

« Previous | Next » 

Revision 19

Added by stefan about 19 years ago

Removed direct access path disclosure occurrences.

View differences:

trunk/wb/admin/groups/get_permissions.php
22 22
 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
23 23

  
24 24
*/
25
if(!defined('WB_PATH')) { exit('Direct access to this file is not allowed'); }
25 26

  
26 27
// Get system permissions
27 28
if($admin->get_post('advanced') != 'yes') {
trunk/wb/modules/admin.php
1 1
<?php
2 2

  
3
// $Id: admin.php,v 1.2 2005/04/02 06:25:55 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
33 33
*/
34 34

  
35 35
// Stop this file being access directly
36
if(!defined('WB_PATH')) { exit('Direct access to this file is not allowed'); }
36
if(!defined('WB_URL')) {
37
	header('Location: ../index.php');
38
}
37 39

  
38 40
// Get page id
39 41
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
trunk/wb/framework/class.login.php
1 1
<?php
2 2

  
3
// $Id: class.login.php,v 1.7 2005/04/02 06:25:54 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
32 32
*/
33 33

  
34 34
// Stop this file from being accessed directly
35
if(!defined('WB_PATH')) { exit('Direct access to this file is not allowed'); }
35
if(!defined('WB_URL')) {
36
	header('Location: ../index.php');
37
}
36 38

  
37 39
define('LOGIN_CLASS_LOADED', true);
38 40

  
trunk/wb/framework/class.wb.php
30 30
This class is the basis for admin and frontend classes.
31 31

  
32 32
*/
33
if(!defined('WB_URL')) {
34
	header('Location: ../index.php');
35
}
33 36

  
34 37

  
35 38
class wb
trunk/wb/framework/class.order.php
1 1
<?php
2 2

  
3
// $Id: class.order.php,v 1.2 2005/04/02 06:25:54 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
33 33
*/
34 34

  
35 35
// Stop this file from being accessed directly
36
if(!defined('WB_PATH')) { exit('Direct access to this file is not allowed'); }
36
if(!defined('WB_URL')) {
37
	header('Location: ../index.php');
38
}
37 39

  
38 40
define('ORDERING_CLASS_LOADED', true);
39 41

  
trunk/wb/framework/convert.php
1 1
<?php
2 2

  
3
// $Id: convert.php,v 1.1 2005/04/15 05:38:22 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
28 28
This file helps convert possible error-causing
29 29
characters to equivalent non-error-causing ones
30 30
*/
31
if(!defined('WB_URL')) {
32
	header('Location: ../index.php');
33
}
31 34

  
32 35
$conversion_array = array(
33
'À'=>'A','Á'=>'A','Â'=>'A','Ã'=>'A','Ä'=>'Ae', '&Auml;'=>'A',
36
'À'=>'A','??'=>'A','Â'=>'A','Ã'=>'A','Ä'=>'Ae', '&Auml;'=>'A',
34 37
'Å'=>'A','Ā'=>'A','Ą'=>'A','Ă'=>'A', 'Æ'=>'Ae',
35 38
'Ç'=>'C','Ć'=>'C','Č'=>'C','Ĉ'=>'C','Ċ'=>'C',
36
'Ď'=>'D','Đ'=>'D','Ð'=>'D',
39
'Ď'=>'D','??'=>'D','??'=>'D',
37 40
'È'=>'E','É'=>'E','Ê'=>'E','Ë'=>'E','Ē'=>'E',
38 41
'Ę'=>'E','Ě'=>'E','Ĕ'=>'E','Ė'=>'E',
39 42
'Ĝ'=>'G','Ğ'=>'G','Ġ'=>'G','Ģ'=>'G',
40 43
'Ĥ'=>'H','Ħ'=>'H',
41
'Ì'=>'I','Í'=>'I','Î'=>'I','Ï'=>'I','Ī'=>'I', 'Ĩ'=>'I','Ĭ'=>'I','Į'=>'I','İ'=>'I',
44
'Ì'=>'I','??'=>'I','Î'=>'I','??'=>'I','Ī'=>'I', 'Ĩ'=>'I','Ĭ'=>'I','Į'=>'I','İ'=>'I',
42 45
'IJ'=>'IJ','Ĵ'=>'J','Ķ'=>'K',
43
'Ł'=>'K','Ľ'=>'K','Ĺ'=>'K','Ļ'=>'K','Ŀ'=>'K',
46
'??'=>'K','Ľ'=>'K','Ĺ'=>'K','Ļ'=>'K','Ŀ'=>'K',
44 47
'Ñ'=>'N','Ń'=>'N','Ň'=>'N','Ņ'=>'N','Ŋ'=>'N',
45 48
'Ò'=>'O','Ó'=>'O','Ô'=>'O','Õ'=>'O','Ö'=>'Oe',
46
'&Ouml;'=>'Oe', 'Ø'=>'O','Ō'=>'O','Ő'=>'O','Ŏ'=>'O',
49
'&Ouml;'=>'Oe', 'Ø'=>'O','Ō'=>'O','??'=>'O','Ŏ'=>'O',
47 50
'Œ'=>'OE', 'Ŕ'=>'R','Ř'=>'R','Ŗ'=>'R',
48 51
'Ś'=>'S','Š'=>'S','Ş'=>'S','Ŝ'=>'S','Ș'=>'S',
49 52
'Ť'=>'T','Ţ'=>'T','Ŧ'=>'T','Ț'=>'T',
50 53
'Ù'=>'U','Ú'=>'U','Û'=>'U','Ü'=>'Ue','Ū'=>'U',
51 54
'&Uuml;'=>'Ue', 'Ů'=>'U','Ű'=>'U','Ŭ'=>'U','Ũ'=>'U','Ų'=>'U',
52
'Ŵ'=>'W', 'Ý'=>'Y','Ŷ'=>'Y','Ÿ'=>'Y', 'Ź'=>'Z','Ž'=>'Z','Ż'=>'Z',
55
'Ŵ'=>'W', '??'=>'Y','Ŷ'=>'Y','Ÿ'=>'Y', 'Ź'=>'Z','Ž'=>'Z','Ż'=>'Z',
53 56
'Þ'=>'T','Þ'=>'T', 'à'=>'a','á'=>'a','â'=>'a','ã'=>'a','ä'=>'ae',
54
'&auml;'=>'ae', 'å'=>'a','ā'=>'a','ą'=>'a','ă'=>'a',
55
'æ'=>'ae', 'ç'=>'c','ć'=>'c','č'=>'c','ĉ'=>'c','ċ'=>'c',
56
'ď'=>'d','đ'=>'d','ð'=>'d', 'è'=>'e','é'=>'e','ê'=>'e','ë'=>'e','ē'=>'e',
57
'&auml;'=>'ae', 'å'=>'a','??'=>'a','ą'=>'a','ă'=>'a',
58
'æ'=>'ae', 'ç'=>'c','ć'=>'c','??'=>'c','ĉ'=>'c','ċ'=>'c',
59
'??'=>'d','đ'=>'d','ð'=>'d', 'è'=>'e','é'=>'e','ê'=>'e','ë'=>'e','ē'=>'e',
57 60
'ę'=>'e','ě'=>'e','ĕ'=>'e','ė'=>'e', 'ƒ'=>'f',
58
'ĝ'=>'g','ğ'=>'g','ġ'=>'g','ģ'=>'g', 'ĥ'=>'h','ħ'=>'h',
61
'??'=>'g','ğ'=>'g','ġ'=>'g','ģ'=>'g', 'ĥ'=>'h','ħ'=>'h',
59 62
'ì'=>'i','í'=>'i','î'=>'i','ï'=>'i','ī'=>'i', 'ĩ'=>'i','ĭ'=>'i','į'=>'i','ı'=>'i',
60 63
'ij'=>'ij', 'ĵ'=>'j', 'ķ'=>'k','ĸ'=>'k', 'ł'=>'l','ľ'=>'l','ĺ'=>'l','ļ'=>'l','ŀ'=>'l',
61 64
'ñ'=>'n','ń'=>'n','ň'=>'n','ņ'=>'n','ʼn'=>'n', 'ŋ'=>'n',
62 65
'ò'=>'o','ó'=>'o','ô'=>'o','õ'=>'o','ö'=>'oe', '&ouml;'=>'oe',
63
'ø'=>'o','ō'=>'o','ő'=>'o','ŏ'=>'o', 'œ'=>'oe', 'ŕ'=>'r','ř'=>'r','ŗ'=>'r',
66
'ø'=>'o','??'=>'o','ő'=>'o','??'=>'o', 'œ'=>'oe', 'ŕ'=>'r','ř'=>'r','ŗ'=>'r',
64 67
'š'=>'s', 'ù'=>'u','ú'=>'u','û'=>'u','ü'=>'ue','ū'=>'u', '&uuml;'=>'ue',
65 68
'ů'=>'u','ű'=>'u','ŭ'=>'u','ũ'=>'u','ų'=>'u', 'ŵ'=>'w',
66 69
'ý'=>'y','ÿ'=>'y','ŷ'=>'y', 'ž'=>'z','ż'=>'z','ź'=>'z', 'þ'=>'t', 'ß'=>'ss', 'ſ'=>'ss'
trunk/wb/framework/class.database.php
1 1
<?php
2 2

  
3
// $Id: class.database.php,v 1.5 2005/06/23 06:34:18 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
33 33
*/
34 34

  
35 35
// Stop this file from being accessed directly
36
if(!defined('WB_PATH')) { exit('Direct access to this file is not allowed'); }
36
if(!defined('WB_URL')) {
37
	header('Location: ../index.php');
38
}
37 39

  
38 40
if(!defined('DB_URL')) {
39 41
	//define('DB_URL', DB_TYPE.'://'.DB_USERNAME.':'.DB_PASSWORD.'@'.DB_HOST.'/'.DB_NAME);
trunk/wb/framework/functions.php
1 1
<?php
2 2

  
3
// $Id: functions.php,v 1.20 2005/06/23 05:47:22 rdjurovich Exp $
3
// $Id$
4 4

  
5 5
/*
6 6

  
......
31 31
*/
32 32

  
33 33
// Stop this file from being accessed directly
34
if(!defined('WB_PATH')) { exit('Direct access to this file is not allowed'); }
34
if(!defined('WB_URL')) {
35
	header('Location: ../index.php');
36
}
35 37

  
36 38
// Define that this file has been loaded
37 39
define('FUNCTIONS_FILE_LOADED', true);

Also available in: Unified diff