X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-usage.php;h=a887b87616351074b99bf45f2189ea0de22ca22d;hb=c5173c4d66be7ec72fbf8051a2097cbb377e87a0;hp=9fcbcaaeb49b1841b10778ecc294397862d41271;hpb=b73c135350d7ed266c0cac680105707139bd892d;p=mailer.git diff --git a/inc/modules/admin/what-usage.php b/inc/modules/admin/what-usage.php index 9fcbcaaeb4..a887b87616 100644 --- a/inc/modules/admin/what-usage.php +++ b/inc/modules/admin/what-usage.php @@ -1,7 +1,7 @@ 0) $_GET['image'] = substr($_GET['image'], 0, strpos($_GET['image'], "\\")); - $file = sprintf("%s%s%s_usage_%s.png", PATH, $usage, SQL_ESCAPE($_GET['type']), SQL_ESCAPE($_GET['image'])); + if (strpos(getRequestParameter('image'), "\\") > 0) setGetRequestParameter('image', substr(getRequestParameter('image'), 0, strpos(getRequestParameter('image'), "\\"))); + $FQFN = sprintf("%s%s/%s_usage_%s.png", + getPath(), + getConfig('usage_base'), + getRequestParameter('type'), + getRequestParameter('image') + ); } - if (FILE_READABLE($file)) { - $image = imagecreatefrompng($file); - header("Content-type: image/png"); + if (isFileReadable($FQFN)) { + $image = imagecreatefrompng($FQFN); + setContentType('image/png'); imagepng($image); imagedestroy($image); - } - exit(); -} elseif (empty($_GET['usage'])) { - $file = sprintf("%s%sindex.html", PATH, $usage); -} else { - $file = sprintf("%s%susage_%s.html", - PATH, - $usage, - SQL_ESCAPE($_GET['usage']) + } // END - if + shutdown(); +} elseif (isGetRequestParameterSet('usage')) { + $FQFN = sprintf("%s%s/usage_%s.html", + getPath(), + getConfig('usage_base'), + getRequestParameter('usage') ); } -if (!empty($file)) { - if (FILE_READABLE($file)) { - $tmpl_file = implode("", file($file)); - $tmpl_file = addslashes($tmpl_file); - $tmpl_file = "\$content=\"".$tmpl_file."\";"; - eval($tmpl_file); - $content = str_replace("usage.png", URL."/modules.php?module=admin&what=".$GLOBALS['what']."&type=usage&image=usage", $content); - $content = str_replace("daily_usage_", URL."/modules.php?module=admin&what=".$GLOBALS['what']."&type=daily&image=", $content); - $content = str_replace("hourly_usage_", URL."/modules.php?module=admin&what=".$GLOBALS['what']."&type=hourly&image=", $content); - $content = str_replace("ctry_usage_", URL."/modules.php?module=admin&what=".$GLOBALS['what']."&type=ctry&image=", $content); - $content = str_replace("usage_", URL."/modules.php?module=admin&what=".$GLOBALS['what']."&usage=", str_replace(".html", "", $content)); - // Disabled due to too much trouble - //$content = str_replace("HREF=\"http://", "href=\"".URL."/modules.php?module=loader&url=http://", $content); - $test = strtolower($content); - $body_start = strpos($test, "
"); - if (($body_start > 0) && ($body_end > 0)) - { - $content = substr(substr($content, 0, $body_end), $body_start); - $content = substr($content, strpos($content, ">") + 1); - OUTPUT_HTML("