X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fgen_sql_patches.php;h=57ec554ca29ef3b8ad3f40a7fe747987d406e7c4;hb=4939d0ea8f0846283675f45c1d47f15b587789aa;hp=8a8797dcafb1af8c5486e7d111a6eee747ce75b5;hpb=d1637dad0b2ca0e5fb411ee0843f01bfb4cc94e0;p=mailer.git diff --git a/inc/gen_sql_patches.php b/inc/gen_sql_patches.php index 8a8797dcaf..57ec554ca2 100644 --- a/inc/gen_sql_patches.php +++ b/inc/gen_sql_patches.php @@ -17,7 +17,7 @@ * Needs to be in all Files and every File needs "svn propset * * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * - * Copyright (c) 2003 - 2008 by Roland Haeder * + * Copyright (c) 2003 - 2009 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -37,13 +37,12 @@ ************************************************************************/ // Some security stuff... -if (ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) { - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), '/inc') + 4) . '/security.php'; - require($INC); +if (!defined('__SECURITY')) { + die(); } // Check for version of sql_patches -if (GET_EXT_VERSION('sql_patches') < '0.3.6') return false; +if (getExtensionVersion('sql_patches') < '0.3.6') return false; // Check if there is no scrambling string if (getConfig('pass_scramble') == '') { @@ -51,11 +50,9 @@ if (getConfig('pass_scramble') == '') { $scrambleString = genScrambleString(40); // ... and store it there for future usage - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_config` SET pass_scramble='%s' WHERE config=0 LIMIT 1", - array($scrambleString), __FILE__, __LINE__); + updateConfiguration('pass_scramble', $scrambleString); - // Also remember it in config - setConfigEntry('pass_scramble', $scrambleString); + // Remove dummy string unset($scrambleString); } // END - if @@ -66,11 +63,9 @@ if (getConfig('master_salt') == '') { $masterSalt = scrambleString(sha1(generatePassword(mt_rand(128, 256)))); // ... and store it there for future usage - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_config` SET `master_salt`='%s' WHERE config=0 LIMIT 1", - array($masterSalt), __FILE__, __LINE__); + updateConfiguration('master_salt', $masterSalt); - // Also remember it in config - setConfigEntry('master_salt', $masterSalt); + // Remove dummy string unset($masterSalt); } // END - if @@ -78,7 +73,7 @@ if (getConfig('file_hash') == '') { // Create filename from hashed random string $fileHash = sha1(generatePassword(mt_rand(128, 256))); $FQFN = sprintf("%sinc/.secret/.%s", - constant('PATH'), + getConfig('PATH'), $fileHash ); @@ -99,12 +94,11 @@ if (getConfig('file_hash') == '') { //* DEBUG: */ die("Secret-Key: ".$secretKey."
Cookie: ".getSession('u_hash')."
Test: ".$test); // Write $fileHash to database - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_config` SET file_hash='%s' WHERE config=0 LIMIT 1", - array($fileHash), __FILE__, __LINE__); + updateConfiguration('file_hash', $fileHash); // Generate FQFN for .htaccess file $FQFN = sprintf("%sinc/.secret/.htaccess", - constant('PATH') + getConfig('PATH') ); // Is the .htaccess file there? @@ -115,7 +109,6 @@ if (getConfig('file_hash') == '') { // Also update configuration setConfigEntry('secret_key', $secretKey); - setConfigEntry('file_hash' , $fileHash); // Remove variables unset($secretKey);