danwin1210/le-chat-php
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix a few forms to be used cookie-less

Browse Source
This commit is contained in:
Daniel Winzen
2016-04-15 16:07:15 +02:00
parent 30d460b91e
commit db86cb984b
2 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG
View File

@ -1,6 +1,8 @@
Version 1.16.4 - Apr. 15, 2016
Properly escape some parameters Properly escape some parameters
Add caching hack for aggressively caching browsers (e.g. links) Add caching hack for aggressively caching browsers (e.g. links)
Improve invalid filter handling + allow new line match with \n Improve invalid filter handling + allow new line match with \n
Fix a few forms to be used cookie-less
Version 1.16.3 - Apr. 14, 2016 Version 1.16.3 - Apr. 14, 2016
Fix warning on redirection of links without a scheme Fix warning on redirection of links without a scheme

16
chat.php
View File

@ -366,7 +366,7 @@ function send_access_denied(){
echo "<h1>$I[accessdenied]</h1>".sprintf($I['loggedinas'], style_this($U['nickname'], $U['style'])); echo "<h1>$I[accessdenied]</h1>".sprintf($I['loggedinas'], style_this($U['nickname'], $U['style']));
echo "<br><$H[form]>$H[commonform]".hidden('action', 'logout'); echo "<br><$H[form]>$H[commonform]".hidden('action', 'logout');
if(!isSet($_REQUEST['session'])){ if(!isSet($_REQUEST['session'])){
hidden('session', $U['session']); echo hidden('session', $U['session']);
} }
echo submit($I['logout'], 'id="exitbutton"')."</form>"; echo submit($I['logout'], 'id="exitbutton"')."</form>";
print_end(); print_end();
@ -652,18 +652,18 @@ function send_setup(){
echo '<table class="center-table"><tr>'; echo '<table class="center-table"><tr>';
echo "<td><$H[form]>$H[commonform]".hidden('action', 'setup').hidden('do', 'backup'); echo "<td><$H[form]>$H[commonform]".hidden('action', 'setup').hidden('do', 'backup');
if(!isSet($_REQUEST['session'])){ if(!isSet($_REQUEST['session'])){
hidden('session', $U['session']); echo hidden('session', $U['session']);
} }
echo submit($I['backuprestore']).'</form></td>'; echo submit($I['backuprestore']).'</form></td>';
echo "<td><$H[form]>$H[commonform]".hidden('action', 'setup').hidden('do', 'destroy'); echo "<td><$H[form]>$H[commonform]".hidden('action', 'setup').hidden('do', 'destroy');
if(!isSet($_REQUEST['session'])){ if(!isSet($_REQUEST['session'])){
hidden('session', $U['session']); echo hidden('session', $U['session']);
} }
echo submit($I['destroy'], 'class="delbutton"').'</form></td></tr></table><br>'; echo submit($I['destroy'], 'class="delbutton"').'</form></td></tr></table><br>';
} }
echo "<$H[form]>$H[commonform]".hidden('action', 'logout'); echo "<$H[form]>$H[commonform]".hidden('action', 'logout');
if(!isSet($_REQUEST['session'])){ if(!isSet($_REQUEST['session'])){
hidden('session', $U['session']); echo hidden('session', $U['session']);
} }
echo submit($I['logout'], 'id="exitbutton"')."</form>$H[credit]"; echo submit($I['logout'], 'id="exitbutton"')."</form>$H[credit]";
print_end(); print_end();
@ -1468,12 +1468,12 @@ function send_waiting_room(){
echo '</p><br><br>'; echo '</p><br><br>';
echo "<hr><$H[form]>$H[commonform]"; echo "<hr><$H[form]>$H[commonform]";
if(!isSet($_REQUEST['session'])){ if(!isSet($_REQUEST['session'])){
hidden('session', $U['session']); echo hidden('session', $U['session']);
} }
echo hidden('action', 'wait').submit($I['reload']).'</form><br>'; echo hidden('nocache', substr(time(), -6)).hidden('action', 'wait').submit($I['reload']).'</form><br>';
echo "<$H[form]>$H[commonform]"; echo "<$H[form]>$H[commonform]";
if(!isSet($_REQUEST['session'])){ if(!isSet($_REQUEST['session'])){
hidden('session', $U['session']); echo hidden('session', $U['session']);
} }
echo hidden('action', 'logout').submit($I['exit'], 'id="exitbutton"').'</form>'; echo hidden('action', 'logout').submit($I['exit'], 'id="exitbutton"').'</form>';
$rulestxt=get_setting('rulestxt'); $rulestxt=get_setting('rulestxt');
@ -3493,7 +3493,7 @@ function load_lang(){
} }
function load_config(){ function load_config(){
define('VERSION', '1.16.3'); // Script version define('VERSION', '1.16.4'); // Script version
define('DBVERSION', 16); // Database version define('DBVERSION', 16); // Database version
define('MSGENCRYPTED', false); // Store messages encrypted in the database to prevent other database users from reading them - true/false - visit the setup page after editing! define('MSGENCRYPTED', false); // Store messages encrypted in the database to prevent other database users from reading them - true/false - visit the setup page after editing!
define('ENCRYPTKEY', 'MY_KEY'); // Encryption key for messages define('ENCRYPTKEY', 'MY_KEY'); // Encryption key for messages