public function start() { if (!isset($_SESSION["autorised"])) { header('Location: ' . $_SESSION['base_url'] . '/home'); } include_once "/../models/model_test.php"; $tests = get_tests(); include_once "/../pages/test_start.php"; }
global $ERROR_FUNCS; $ERROR_FUNCS = array('posix_getuid' => 1, 'ftp_fput' => 1, 'ftp_nlist' => 1, 'ftp_size' => 1, 'ftp_cdup' => 1, 'ftp_pasv' => 1, 'ftp_rawlist' => 1, 'ftp_cdup' => 1, 'ftp_chdir' => 1, 'ftp_pwd' => 1, 'ftp_login' => 1, 'ftp_mkdir' => 1, 'ftp_rmdir' => 1, 'ftp_get' => 1, 'ftp_fget' => 1, 'ftp_put' => 1, 'ftp_rename' => 1, 'ftp_delete' => 1, 'ftp_site' => 1, 'gzopen' => 1, 'imagecreatefromstring' => 1, 'imagecreatefrompng' => 1, 'imagecreatefromjpeg' => 1, 'ldap_bind' => 1, 'ldap_connect' => 1, 'ldap_list' => 1, 'ldap_search' => 1, 'ldap_add' => 1, 'ldap_compare' => 1, 'ldap_delete' => 1, 'ldap_mod_add' => 1, 'ldap_mod_del' => 1, 'ldap_mod_replace' => 1, 'ldap_modify' => 1, 'ldap_read' => 1, 'ldap_rename' => 1, 'mail' => 1, 'move_uploaded_file' => 1, 'mysql_data_seek' => 1, 'mysql_field_name' => 1, 'mysql_field_len' => 1, 'mysql_field_flags' => 1, 'mysql_field_type' => 1, 'mysql_field_seek' => 1, 'mysql_field_table' => 1, 'ob_end_flush' => 1, 'ob_end_clean' => 1, 'parse_url' => 1, 'shell_exec' => 1, 'unserialize' => 1, 'unpack' => 1, 'system' => 1, 'popen' => 1, 'getimagesize' => 1, 'error_log' => 1, 'session_cache_limiter' => 1, 'session_start' => 1, 'imagepng' => 1, 'imagejpeg' => 1, 'imagettfbbox' => 1, 'imagettftext' => 1, 'gethostbyname' => 1, 'imagecreatetruecolor' => 1, 'imagetruecolortopalette' => 1, 'imagesetthickness' => 1, 'imageellipse' => 1, 'imagefilledellipse' => 1, 'imagefilledarc' => 1, 'imagealphablending' => 1, 'imagecolorresolvealpha' => 1, 'imagecolorexactalpha' => 1, 'imagecopyresampled' => 1, 'imagesettile' => 1, 'imagesetbrush' => 1, 'putenv' => 1, 'rmdir' => 1, 'opendir' => 1, 'copy' => 1, 'file' => 1, 'fopen' => 1, 'chmod' => 1, 'chgrp' => 1, 'unlink' => 1, 'mkdir' => 1, 'rename' => 1, 'chdir' => 1, 'filectime' => 1, 'filegroup' => 1, 'filemtime' => 1, 'fileowner' => 1, 'fileperms' => 1, 'filesize' => 1, 'opendir' => 1, 'pathinfo' => 1, 'fileatime' => 1, 'md5_file' => 1, 'readfile' => 1, 'readgzfile' => 1, 'filetype' => 1, 'parse_ini_file' => 1, 'is_executable' => 1, 'disk_free_space' => 1, 'disk_total_space' => 1, 'get_meta_tags' => 1, 'gzfile' => 1, 'tempnam' => 1, 'tmpfile' => 1, 'flock' => 1, 'touch' => 1, 'highlight_file' => 1, 'set_time_limit' => 1, 'exec' => 1, 'passthru' => 1); // Load up function info global $FUNCTION_SIGNATURES; global $OCPORTAL_PATH; if (isset($GLOBALS['API']) || isset($_GET['test'])) { $functions_file = file_get_contents(file_exists($OCPORTAL_PATH . '/data_custom/functions.dat') ? $OCPORTAL_PATH . '/data_custom/functions.dat' : 'functions.dat'); $FUNCTION_SIGNATURES = unserialize($functions_file); } else { $FUNCTION_SIGNATURES = array(); } // To get it started if (isset($_GET['test'])) { $GLOBALS['API'] = 1; $GLOBALS['CHECKS'] = 1; $tests = get_tests(); $parsed = parse(lex('<' . '?php' . "\n" . $tests[$_GET['test']] . "\n")); check($parsed); } elseif (!isset($_GET['to_use']) && !isset($_SERVER['argv'][1])) { $avoid = array(); if (isset($_GET['avoid'])) { $avoid = explode(',', $_GET['avoid']); } $files = do_dir($OCPORTAL_PATH . (isset($_GET['subdir']) ? '/' . $_GET['subdir'] : ''), true, false, $avoid); $start = isset($_GET['start']) ? intval($_GET['start']) : 0; foreach ($files as $i => $to_use) { if ($i <= $start) { continue; } // Set to largest number we know so far work if (strpos(file_get_contents($to_use), '/*CQC: No check*/') !== false) {