PHP cmtx_check_csrf_url_key Beispiele

Beispiel #1

Datei: settings_email_sender.php Projekt: jonathancromie/ifb299

echo $_GET['page'];
?>
" target="_blank"><?php 
echo CMTX_LINK_HELP;
?>
</a>
</div>

<h3><?php 
echo CMTX_TITLE_EMAIL_SENDER;
?>
</h3>
<hr class="title"/>

<?php 
if (isset($_GET['notice']) && $_GET['notice'] == "dismiss" && cmtx_check_csrf_url_key()) {
    cmtx_db_query("UPDATE `" . $cmtx_mysql_table_prefix . "settings` SET `value` = '0' WHERE `title` = 'notice_settings_email_sender'");
} else {
    if (cmtx_setting('notice_settings_email_sender')) {
        ?>
<div class="info"><?php 
        echo CMTX_MSG_NOTICE_SETTINGS_EMAIL_SENDER . " <a href='index.php?page=settings_email_sender&notice=dismiss&key=" . $_SESSION['cmtx_csrf_key'] . "'>" . CMTX_LINK_DISMISS . "</a>";
        ?>
</div>
<div style="clear: left;"></div>
<?php 
    }
}
?>

<?php 

Beispiel #2

Datei: manage_comments.php Projekt: GTAWWEKID/tsiserver.us

            fputs($handle, "\r\n" . $website);
            fclose($handle);
        }
        ?>
<div class="success"><?php 
        echo CMTX_MSG_SPAM_REMOVED;
        ?>
</div>
<div style="clear: left;"></div>
<?php 
    }
}
?>

<?php 
if (isset($_GET['id']) && ctype_digit($_GET['id']) && cmtx_record_exists($_GET['id'], "comments") && cmtx_check_csrf_url_key()) {
    if (cmtx_setting('is_demo')) {
        ?>
<div class="warning"><?php 
        echo CMTX_MSG_DEMO;
        ?>
</div>
<div style="clear: left;"></div>
<?php 
    } else {
        if ($_GET['action'] == "delete") {
            $id = $_GET['id'];
            $id = cmtx_sanitize($id);
            cmtx_db_query("DELETE FROM `" . $cmtx_mysql_table_prefix . "comments` WHERE `id` = '{$id}'");
            cmtx_delete_replies($id);
            cmtx_db_query("DELETE FROM `" . $cmtx_mysql_table_prefix . "voters` WHERE `comment_id` = '{$id}'");

Beispiel #3

Datei: manage_administrators.php Projekt: jonathancromie/ifb299

<div class="success"><?php 
            echo CMTX_MSG_ADMIN_ADDED;
            ?>
</div>
<div style="clear: left;"></div>
<?php 
        }
        ?>

<?php 
    }
}
?>

<?php 
if (isset($_GET['action']) && $_GET['action'] == "delete" && isset($_GET['id']) && ctype_digit($_GET['id']) && cmtx_record_exists($_GET['id'], "admins") && cmtx_check_csrf_url_key()) {
    if (cmtx_setting('is_demo')) {
        ?>
<div class="warning"><?php 
        echo CMTX_MSG_DEMO;
        ?>
</div>
<div style="clear: left;"></div>
<?php 
    } else {
        $id = $_GET['id'];
        $id = cmtx_sanitize($id);
        if (cmtx_db_num_rows(cmtx_db_query("SELECT * FROM `" . $cmtx_mysql_table_prefix . "admins` WHERE `is_super` = '1' AND `id` = '{$id}'"))) {
            ?>
<div class="error"><?php 
            echo CMTX_MSG_ADMIN_SUPER_DELETE;

Beispiel #4

Datei: tool_db_backup.php Projekt: jonathancromie/ifb299

            }
            $command = cmtx_setting('mysqldump_path') . "mysqldump --host={$cmtx_mysql_host} --user={$cmtx_mysql_username} --password={$cmtx_mysql_password} {$cmtx_mysql_database} > {$backup_file}";
            system($command);
            ?>
<div class="success"><?php 
            echo CMTX_MSG_BACKUP_CREATED;
            ?>
</div>
<div style="clear: left;"></div>
<?php 
        }
    }
    ?>

<?php 
    if (isset($_GET['action']) && $_GET['action'] == "delete" && isset($_GET['id']) && cmtx_check_csrf_url_key()) {
        if (cmtx_setting('is_demo')) {
            ?>
<div class="warning"><?php 
            echo CMTX_MSG_DEMO;
            ?>
</div>
<div style="clear: left;"></div>
<?php 
        } else {
            $id = basename($_GET['id']);
            if (ctype_alnum($id) && strlen($id) == 20 && file_exists("backups/" . $id . ".sql")) {
                unlink("backups/" . $id . ".sql");
                ?>
<div class="success"><?php 
                echo CMTX_MSG_BACKUP_DELETED;