0ct0pu5/forkbb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix $request

Browse source
This commit is contained in:
Visman 2017-01-09 21:27:14 +07:00
parent d054a3abdc
commit 7f4407f294
5 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
addons/security_for_login.php
View file

@ -139,7 +139,7 @@ class addon_security_for_login extends flux_addon
if (security_test_browser())
$errors[] = security_msg('2');
$result = $db->query('SELECT * FROM '.$db->prefix.'sec_of_login WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\' LIMIT 1') or error('Unable to get sec_of_login data', __FILE__, __LINE__, $db->error());
$result = $db->query('SELECT * FROM '.$db->prefix.'sec_of_login WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\' LIMIT 1') or error('Unable to get sec_of_login data', __FILE__, __LINE__, $db->error());
$cur_form = $db->fetch_assoc($result);
if (empty($cur_form['form_time']) || $cur_form['form_captcha'] == 'error')
@ -165,9 +165,9 @@ class addon_security_for_login extends flux_addon
}
if (empty($errors))
$db->query('DELETE FROM '.$db->prefix.'sec_of_login WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\'') or error('Unable to delete sec_of_login data', __FILE__, __LINE__, $db->error());
$db->query('DELETE FROM '.$db->prefix.'sec_of_login WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\'') or error('Unable to delete sec_of_login data', __FILE__, __LINE__, $db->error());
else
$db->query('UPDATE '.$db->prefix.'sec_of_login SET form_captcha=\'error\' WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\'') or error('Unable to update sec_of_login data', __FILE__, __LINE__, $db->error());
$db->query('UPDATE '.$db->prefix.'sec_of_login SET form_captcha=\'error\' WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\'') or error('Unable to update sec_of_login data', __FILE__, __LINE__, $db->error());
}

6
addons/security_for_post.php
View file

@ -137,7 +137,7 @@ class addon_security_for_post extends flux_addon
if (security_test_browser())
$errors[] = security_msg('2');
$result = $db->query('SELECT * FROM '.$db->prefix.'sec_of_post WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\' LIMIT 1') or error('Unable to get sec_of_post data', __FILE__, __LINE__, $db->error());
$result = $db->query('SELECT * FROM '.$db->prefix.'sec_of_post WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\' LIMIT 1') or error('Unable to get sec_of_post data', __FILE__, __LINE__, $db->error());
$cur_form = $db->fetch_assoc($result);
if (empty($cur_form['form_time']) || $cur_form['form_captcha'] == 'error')
@ -164,9 +164,9 @@ class addon_security_for_post extends flux_addon
}
if (empty($errors))
$db->query('DELETE FROM '.$db->prefix.'sec_of_post WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\'') or error('Unable to delete sec_of_post data', __FILE__, __LINE__, $db->error());
$db->query('DELETE FROM '.$db->prefix.'sec_of_post WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\'') or error('Unable to delete sec_of_post data', __FILE__, __LINE__, $db->error());
else
$db->query('UPDATE '.$db->prefix.'sec_of_post SET form_captcha=\'error\' WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\'') or error('Unable to update sec_of_post data', __FILE__, __LINE__, $db->error());
$db->query('UPDATE '.$db->prefix.'sec_of_post SET form_captcha=\'error\' WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\'') or error('Unable to update sec_of_post data', __FILE__, __LINE__, $db->error());
}

6
addons/security_for_register.php
View file

@ -138,7 +138,7 @@ class addon_security_for_register extends flux_addon
if (security_test_browser())
$errors[] = security_msg('2');
$result = $db->query('SELECT * FROM '.$db->prefix.'sec_of_register WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\' LIMIT 1') or error('Unable to get sec_of_register data', __FILE__, __LINE__, $db->error());
$result = $db->query('SELECT * FROM '.$db->prefix.'sec_of_register WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\' LIMIT 1') or error('Unable to get sec_of_register data', __FILE__, __LINE__, $db->error());
$cur_form = $db->fetch_assoc($result);
if (empty($cur_form['form_time']) || $cur_form['form_captcha'] == 'error')
@ -165,9 +165,9 @@ class addon_security_for_register extends flux_addon
}
if (empty($errors))
$db->query('DELETE FROM '.$db->prefix.'sec_of_register WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\'') or error('Unable to delete sec_of_register data', __FILE__, __LINE__, $db->error());
$db->query('DELETE FROM '.$db->prefix.'sec_of_register WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\'') or error('Unable to delete sec_of_register data', __FILE__, __LINE__, $db->error());
else
$db->query('UPDATE '.$db->prefix.'sec_of_register SET form_captcha=\'error\' WHERE form_key=\''.$db->escape($requst->postStr($this->form_key, '')).'\'') or error('Unable to update sec_of_register data', __FILE__, __LINE__, $db->error());
$db->query('UPDATE '.$db->prefix.'sec_of_register SET form_captcha=\'error\' WHERE form_key=\''.$db->escape($request->postStr($this->form_key, '')).'\'') or error('Unable to update sec_of_register data', __FILE__, __LINE__, $db->error());
}

2
login.php
View file

@ -108,7 +108,7 @@ if ($request->isPost('form_sent') && $action === 'in')
set_tracked_topics(null);
// Try to determine if the data in redirect_url is valid (if not, we redirect to index.php after login)
$redirect_url = validate_redirect($reqiest->postStr('redirect_url'), 'index.php');
$redirect_url = validate_redirect($request->postStr('redirect_url'), 'index.php');
redirect(pun_htmlspecialchars($redirect_url), $lang_login['Login redirect']);
}

2
moderate.php
View file

@ -624,7 +624,7 @@ if ($request->isRequest('move_topics') || $request->isPost('move_topics_to'))
$db->query('UPDATE '.$db->prefix.'topics SET forum_id='.$move_to_forum.' WHERE id IN('.implode(',',$topics).')') or error('Unable to move topics', __FILE__, __LINE__, $db->error());
// Should we create redirect topics?
if ($requst->isPost('with_redirect'))
if ($request->isPost('with_redirect'))
{
foreach ($topics as $cur_topic)
{