X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Flibs%2Fsecurity_functions.php;h=fa1679ab02bff27f40217711a067204871905276;hp=6e1084ce94a7c7181b4e5664ad049cb494260291;hb=5071030af40e69ca4284642f44758964e18f5be8;hpb=3dc2d90bb1fb18124d214dd0aa06f0d3489393e6

diff --git a/inc/libs/security_functions.php b/inc/libs/security_functions.php
index 6e1084ce94..fa1679ab02 100644
--- a/inc/libs/security_functions.php
+++ b/inc/libs/security_functions.php
@@ -89,9 +89,9 @@ if (!isset($_POST)) {
 
 // Generate arrays which holds the relevante chars to replace
 $GLOBALS['security_chars'] = array(
-	// The chars we are looking for...
+// The chars we are looking for...
 	'from' => array("{", "}", '/', '.', "'", "$", '(', ')', '{--', '--}', "%", ';', "[", "]", ':', "--"),
-	// ... and we will replace to.
+// ... and we will replace to.
 	'to'   => array(
 		"{OPEN_ANCHOR2}",
 		"{CLOSE_ANCHOR2}",
@@ -109,98 +109,98 @@ $GLOBALS['security_chars'] = array(
 		"{CLOSE_INDEX}",
 		"{DBL_DOT}",
 		"{COMMENT}"
-	),
-);
-
-// Characters allowed in URLs
-//
-// Note: Do not replace 'to' with 'from' and vise-versa! When you do this all booked URLs will be
-//       rejected because of the {SLASH}, {DOT} and all below listed items inside the URL.
-$GLOBALS['url_chars'] = array(
-	// Search for these secured characters
+		),
+		);
+
+		// Characters allowed in URLs
+		//
+		// Note: Do not replace 'to' with 'from' and vise-versa! When you do this all booked URLs will be
+		//       rejected because of the {SLASH}, {DOT} and all below listed items inside the URL.
+		$GLOBALS['url_chars'] = array(
+		// Search for these secured characters
 	'to'   => array("{SLASH}", "{DOT}", "{PER}", "{DBL_DOT}", "{COMMENT}"),
-	// Replace with these characters
+		// Replace with these characters
 	'from' => array('/', '.', "%", ':', "--")
-);
-
-// Overworked security part:
-if (is_array($_GET)) {
-	foreach ($_GET as $seckey => $secvalue) {
-		if (is_array($secvalue)) {
-			// Throw arrays away...
-			unset($_GET[$seckey]);
-		} else {
-			// Only variables are allowed (non-array) but we secure them all!
-			foreach ($GLOBALS['security_chars']['from'] as $key => $char) {
-				// Pass all through
-				$_GET[$seckey] = str_replace($char  , $GLOBALS['security_chars']['to'][$key], $_GET[$seckey]);
+		);
+
+		// Overworked security part:
+		if (is_array($_GET)) {
+			foreach ($_GET as $seckey => $secvalue) {
+				if (is_array($secvalue)) {
+					// Throw arrays away...
+					unset($_GET[$seckey]);
+				} else {
+					// Only variables are allowed (non-array) but we secure them all!
+					foreach ($GLOBALS['security_chars']['from'] as $key => $char) {
+						// Pass all through
+						$_GET[$seckey] = str_replace($char  , $GLOBALS['security_chars']['to'][$key], $_GET[$seckey]);
+					}
+
+					// Strip all other out
+					$_GET[$seckey] = strip_tags($_GET[$seckey]);
+				}
 			}
-
-			// Strip all other out
-			$_GET[$seckey] = strip_tags($_GET[$seckey]);
 		}
-	}
-}
 
-if (basename($_SERVER['PHP_SELF']) != 'install.php') {
-	// And POST data
-	foreach ($_POST as $seckey => $secvalue) {
-		if (!is_array($secvalue)) {
-			// Only variables are allowed (non-array) to be secured...
-			foreach ($GLOBALS['security_chars']['from'] as $key => $char) {
-				// Pass all through
-				$_POST[$seckey] = str_replace($char  , $GLOBALS['security_chars']['to'][$key], $_POST[$seckey]);
+		if (basename($_SERVER['PHP_SELF']) != 'install.php') {
+			// And POST data
+			foreach ($_POST as $seckey => $secvalue) {
+				if (!is_array($secvalue)) {
+					// Only variables are allowed (non-array) to be secured...
+					foreach ($GLOBALS['security_chars']['from'] as $key => $char) {
+						// Pass all through
+						$_POST[$seckey] = str_replace($char  , $GLOBALS['security_chars']['to'][$key], $_POST[$seckey]);
+					}
+
+					// Strip all other out
+					$_POST[$seckey] = strip_tags($_POST[$seckey]);
+				}
 			}
-
-			// Strip all other out
-			$_POST[$seckey] = strip_tags($_POST[$seckey]);
 		}
-	}
-}
 
-// Activate caching or transparent compressing when it is not already done
-if (!defined('_OB_CACHING')) {
-	if (phpversion() >= '4.0.4pl1' && (strstr(getenv('HTTP_USER_AGENT'),'compatible') || (strstr(getenv('HTTP_USER_AGENT'), "Mozilla")))) {
-		if ((extension_loaded('zlib')) && (function_exists('ob_start'))) {
-			// Start caching
-			define('_OB_CACHING', 'on');
-			ob_start();
-		} else {
-			// Extension not loaded or required function is missing
-			define('_OB_CACHING', '404');
+		// Activate caching or transparent compressing when it is not already done
+		if (!defined('_OB_CACHING')) {
+			if (phpversion() >= '4.0.4pl1' && (strstr(getenv('HTTP_USER_AGENT'),'compatible') || (strstr(getenv('HTTP_USER_AGENT'), "Mozilla")))) {
+				if ((extension_loaded('zlib')) && (function_exists('ob_start'))) {
+					// Start caching
+					define('_OB_CACHING', 'on');
+					ob_start();
+				} else {
+					// Extension not loaded or required function is missing
+					define('_OB_CACHING', '404');
+				}
+			} else {
+				// Old PHP version
+				define('_OB_CACHING', 'old');
+			}
 		}
-	} else {
-		// Old PHP version
-		define('_OB_CACHING', 'old');
-	}
-}
 
-// At last secure the $_SERVER['PHP_SELF'] element
-$_SERVER['PHP_SELF'] = secureString($_SERVER['PHP_SELF']);
-
-// Split it up into path and filename
-$SELF_DIR  = dirname($_SERVER['PHP_SELF']);
-$SELF_FILE = basename($_SERVER['PHP_SELF']);
-
-// Check for a .php inside the $SELF_DIR...
-while (ereg('.php', $SELF_DIR)) {
-	// Correct the dirname
-	$SELF_DIR = substr($SELF_DIR, 0, (strpos($SELF_DIR, '.php') + 4));
-	// Rewrite filename...
-	$SELF_FILE = basename($SELF_DIR);
-	// ... and dirname
-	$SELF_DIR = dirname($SELF_DIR);
-}
+		// At last secure the $_SERVER['PHP_SELF'] element
+		$_SERVER['PHP_SELF'] = secureString($_SERVER['PHP_SELF']);
+
+		// Split it up into path and filename
+		$SELF_DIR  = dirname($_SERVER['PHP_SELF']);
+		$SELF_FILE = basename($_SERVER['PHP_SELF']);
+
+		// Check for a .php inside the $SELF_DIR...
+		while (ereg('.php', $SELF_DIR)) {
+			// Correct the dirname
+			$SELF_DIR = substr($SELF_DIR, 0, (strpos($SELF_DIR, '.php') + 4));
+			// Rewrite filename...
+			$SELF_FILE = basename($SELF_DIR);
+			// ... and dirname
+			$SELF_DIR = dirname($SELF_DIR);
+		}
 
-// Put both together again and let's pray it is secured now...
-$_SERVER['PHP_SELF'] = $SELF_DIR.'/'.$SELF_FILE;
+		// Put both together again and let's pray it is secured now...
+		$_SERVER['PHP_SELF'] = $SELF_DIR.'/'.$SELF_FILE;
 
-// Remove uneccessary variables
-unset($SELF_DIR);
-unset($SELF_FILE);
+		// Remove uneccessary variables
+		unset($SELF_DIR);
+		unset($SELF_FILE);
 
-// Security system loaded...
-define('__SECURITY', '1');
+		// Security system loaded...
+		define('__SECURITY', '1');
 
-//
-?>
+		//
+		?>