Exemplo n.º 1
0
function xos_update_whos_online()
{
    global $session_started;
    if (isset($_SESSION['customer_id'])) {
        $wo_customer_id = $_SESSION['customer_id'];
        $customer_query = xos_db_query("select customers_firstname, customers_lastname from " . TABLE_CUSTOMERS . " where customers_id = '" . (int) $_SESSION['customer_id'] . "'");
        $customer = xos_db_fetch_array($customer_query);
        $wo_full_name = $customer['customers_firstname'] . ' ' . $customer['customers_lastname'];
    } else {
        $wo_customer_id = '';
        $wo_full_name = 'Guest';
    }
    $wo_session_id = xos_session_id();
    $wo_ip_address = getenv('REMOTE_ADDR');
    $wo_last_page_url = getenv('REQUEST_URI');
    $current_time = time();
    $xx_mins_ago = $current_time - 900;
    // remove entries that have expired
    xos_db_query("delete from " . TABLE_WHOS_ONLINE . " where time_last_click < '" . $xx_mins_ago . "'");
    if ($session_started) {
        $where_str = " where session_id = '" . xos_db_input($wo_session_id) . "'";
    } else {
        $where_str = " where session_id = '' and ip_address = '" . xos_db_input($wo_ip_address) . "'";
    }
    $stored_customer_query = xos_db_query("select count(*) as count from " . TABLE_WHOS_ONLINE . $where_str);
    $stored_customer = xos_db_fetch_array($stored_customer_query);
    if ($stored_customer['count'] > 0) {
        xos_db_query("update " . TABLE_WHOS_ONLINE . " set customer_id = '" . (int) $wo_customer_id . "', full_name = '" . xos_db_input($wo_full_name) . "', ip_address = '" . xos_db_input($wo_ip_address) . "', time_last_click = '" . xos_db_input($current_time) . "', last_page_url = '" . xos_db_input($wo_last_page_url) . "'" . $where_str);
    } else {
        xos_db_query("insert into " . TABLE_WHOS_ONLINE . " (customer_id, full_name, session_id, ip_address, time_entry, time_last_click, last_page_url) values ('" . (int) $wo_customer_id . "', '" . xos_db_input($wo_full_name) . "', '" . xos_db_input($wo_session_id) . "', '" . xos_db_input($wo_ip_address) . "', '" . xos_db_input($current_time) . "', '" . xos_db_input($current_time) . "', '" . xos_db_input($wo_last_page_url) . "')");
    }
}
Exemplo n.º 2
0
                $onclick_link = 'info=' . urlencode($contents[$i]['name']);
            }
            if ($contents[$i]['is_dir']) {
                if ($contents[$i]['name'] == '..') {
                    $icon = xos_image(DIR_WS_ADMIN_IMAGES . ADMIN_TPL . '/icons/previous_level.gif', ICON_TITLE_PREVIOUS_LEVEL);
                } else {
                    $icon = isset($fInfo) && is_object($fInfo) && $contents[$i]['name'] == $fInfo->name ? xos_image(DIR_WS_ADMIN_IMAGES . ADMIN_TPL . '/icons/current_folder.gif', ICON_TITLE_CURRENT_FOLDER) : xos_image(DIR_WS_ADMIN_IMAGES . ADMIN_TPL . '/icons/folder.gif', ICON_TITLE_FOLDER);
                }
                $link = xos_href_link(FILENAME_FILE_MANAGER, 'goto=' . $goto_link);
            } else {
                $icon = $contents[$i]['is_image'] ? xos_image(DIR_WS_ADMIN_IMAGES . ADMIN_TPL . '/icons/image_download.gif', ICON_TITLE_FILE_DOWNLOAD) : xos_image(DIR_WS_ADMIN_IMAGES . ADMIN_TPL . '/icons/file_download.gif', ICON_TITLE_FILE_DOWNLOAD);
                $link = xos_href_link(FILENAME_FILE_MANAGER, 'action=download&filename=' . urlencode($contents[$i]['name']));
            }
            if ($contents[$i]['name'] != '..') {
                $link_delete = xos_href_link(FILENAME_FILE_MANAGER, 'info=' . urlencode($contents[$i]['name']) . '&action=delete');
            }
            $folders_and_files_array[] = array('selected' => $selected, 'link_onclick' => xos_href_link(FILENAME_FILE_MANAGER, $onclick_link), 'link' => $link, 'icon' => $icon, 'name' => $contents[$i]['name'], 'size' => $contents[$i]['is_dir'] ? '&nbsp;' : $contents[$i]['size'], 'permissions' => $contents[$i]['permissions'], 'user' => $contents[$i]['user'], 'group' => $contents[$i]['group'], 'last_modified' => $contents[$i]['last_modified'], 'link_delete' => $link_delete, 'link_filename_file_manager_info' => xos_href_link(FILENAME_FILE_MANAGER, 'info=' . urlencode($contents[$i]['name'])));
        }
        $smarty->assign(array('folders_and_files' => $folders_and_files_array, 'link_filename_file_manager_reset' => xos_href_link(FILENAME_FILE_MANAGER, 'action=reset'), 'link_filename_file_manager_upload' => xos_href_link(FILENAME_FILE_MANAGER, (isset($_GET['info']) ? 'info=' . urlencode($_GET['info']) . '&' : '') . 'action=upload'), 'link_filename_file_manager_new_file' => xos_href_link(FILENAME_FILE_MANAGER, (isset($_GET['info']) ? 'info=' . urlencode($_GET['info']) . '&' : '') . 'action=new_file'), 'link_filename_file_manager_new_folder' => xos_href_link(FILENAME_FILE_MANAGER, (isset($_GET['info']) ? 'info=' . urlencode($_GET['info']) . '&' : '') . 'action=new_folder')));
        require DIR_WS_BOXES . 'infobox_file_manager.php';
    }
    if (SESSID) {
        $smarty->assign('hidden_field_session', xos_draw_hidden_field(xos_session_name(), xos_session_id()));
    }
    $smarty->assign(array('form_begin_goto' => xos_draw_form('goto', FILENAME_FILE_MANAGER, '', 'get'), 'current_path' => $_SESSION['current_path'], 'pull_down_goto' => xos_draw_pull_down_menu('goto', $goto_array, $_SESSION['current_path'], 'onchange="this.form.submit();"'), 'form_end' => '</form>'));
    $smarty->configLoad('languages/' . $_SESSION['language'] . '.conf', 'file_manager');
    $output_file_manager = $smarty->fetch(ADMIN_TPL . '/file_manager.tpl');
    $smarty->assign('central_contents', $output_file_manager);
    $smarty->display(ADMIN_TPL . '/frame.tpl');
    require DIR_WS_INCLUDES . 'application_bottom.php';
}
             $output_string .= '    ' . $form . '.' . $field . '.options[' . $num_option_value . '] = new Option("' . $values['products_options_values_name'] . '", "' . $values['products_options_values_id'] . '");' . "\n";
             $num_option_value++;
         }
         $num_option_name++;
     }
     $output_string .= '  }' . "\n";
     return $output_string;
 }
 $javascript = '<script type="text/javascript">' . "\n" . '/* <![CDATA[ */' . "\n" . 'var tax_rates = new Array();' . "\n";
 for ($i = 0, $n = sizeof($tax_rates_final_array); $i < $n; $i++) {
     if ($tax_rates_final_array[$i]['id'] > 0) {
         $javascript .= 'tax_rates["' . $tax_rates_final_array[$i]['id'] . '"] = ' . $tax_rates_final_array[$i]['value'] . ';' . "\n";
     }
 }
 $javascript .= "\n" . 'function doRound(x, places) {' . "\n" . '  return Math.round(x * Math.pow(10, places)) / Math.pow(10, places);' . "\n" . '}' . "\n\n" . 'function getTaxRate() {' . "\n" . '  var selected_value = document.getElementById("tax_rates_final_id").selectedIndex;' . "\n" . '  var parameterVal = document.getElementById("tax_rates_final_id")[selected_value].value;' . "\n\n" . '  if ( (parameterVal > 0) && (tax_rates[parameterVal] > 0) ) {' . "\n" . '    return tax_rates[parameterVal];' . "\n" . '  } else {' . "\n" . '    return 0;' . "\n" . '  }' . "\n" . '}' . "\n\n" . 'function updateGross(inField, setField) {' . "\n" . '  var taxRate = getTaxRate();' . "\n" . '  if (document.forms["attribute"].elements[inField]) {' . "\n" . '    var grossValue = document.forms["attribute"].elements[inField].value;' . "\n\n" . '    if (taxRate > 0) {' . "\n" . '      grossValue = grossValue * ((taxRate / 100) + 1);' . "\n" . '    }' . "\n\n" . '    document.forms["attribute"].elements[setField].value = doRound(grossValue, 4);' . "\n" . '  } else if (document.getElementById(inField)) {' . "\n" . '    var grossValue = document.getElementById(inField).innerHTML;' . "\n\n" . '    if (taxRate > 0) {' . "\n" . '      grossValue = grossValue * ((taxRate / 100) + 1);' . "\n" . '    }' . "\n\n" . '    document.getElementById(setField).innerHTML = doRound(grossValue, 4);' . "\n" . '  }' . "\n" . '}' . "\n\n" . 'function updateNet(inField, setField) {' . "\n" . '  var taxRate = getTaxRate();' . "\n" . '  if (document.forms["attribute"].elements[inField]) {' . "\n" . '    var netValue = document.forms["attribute"].elements[inField].value;' . "\n\n" . '    if (taxRate > 0) {' . "\n" . '      netValue = netValue / ((taxRate / 100) + 1);' . "\n" . '    }' . "\n\n" . '    document.forms["attribute"].elements[setField].value = doRound(netValue, 4);' . "\n" . '  } else if (document.getElementById(inField)) {' . "\n" . '    var netValue = document.getElementById(inField).innerHTML;' . "\n\n" . '    if (taxRate > 0) {' . "\n" . '      netValue = netValue / ((taxRate / 100) + 1);' . "\n" . '    }' . "\n\n" . '    document.getElementById(setField).innerHTML = doRound(netValue, 4);' . "\n" . '  }' . "\n" . '}' . "\n\n" . 'function updatePrices(net, gross) {' . "\n\n" . '  if (gross) {' . "\n" . '    ' . $update_gross_string . "\n" . '  }' . "\n\n" . '  if (net) {' . "\n" . '    ' . $update_net_string . "\n" . '  }' . "\n\n" . '}' . "\n\n" . 'function update_option_values(the_form) {' . "\n" . '  var num_value = the_form.values_id.options.length;' . "\n" . '  var selected_options_name = "";' . "\n\n" . '  while(num_value > 0) {' . "\n" . '    num_value--;' . "\n" . '    the_form.values_id.options[num_value] = null;' . "\n" . '  }' . "\n\n" . '  selected_options_name = the_form.options_id.options[the_form.options_id.selectedIndex].value;' . "\n\n" . xos_js_option_values_list('selected_options_name', 'the_form', 'values_id') . "\n" . '}' . "\n\n" . 'function toggle_box_sort(box_id) {' . "\n" . '  var divTag = document.forms["attribute"].getElementsByTagName("div");' . "\n\n" . '  for (var i = 0; i < divTag.length; ++i){' . "\n" . '    divTag[i].style.display="none";' . "\n" . '  }' . "\n\n" . '  if (document.getElementById(box_id+"_1")) {' . "\n" . '    document.getElementById(box_id+"_1").style.display="";' . "\n" . '    document.getElementById(box_id+"_2").style.display="";' . "\n" . '  }' . "\n\n" . '}' . "\n\n" . 'function update_action(product_id, option_id, action) {' . "\n" . '  document.forms["attribute"].action="' . xos_href_link(FILENAME_PRODUCTS_ATTRIBUTES) . (SESSID ? '&' : '?') . 'action=" + action + "&products_id=" + product_id + "&options_id=" + option_id + "&' . $parameter_string . '";' . "\n" . '}' . "\n\n" . 'function get_attribute_lists(url, box_id_combs) {' . "\n\n" . '  box_id = box_id_combs;' . "\n\n" . '  http_request = false;' . "\n\n" . '  if (window.XMLHttpRequest) { // Mozilla, Safari,...' . "\n" . '    http_request = new XMLHttpRequest();' . "\n" . '    if (http_request.overrideMimeType) {' . "\n" . '      http_request.overrideMimeType("text/html");' . "\n" . '    }' . "\n" . '  } else if (window.ActiveXObject) { // IE' . "\n" . '    try {' . "\n" . '      http_request = new ActiveXObject("Msxml2.XMLHTTP");' . "\n" . '    } catch (e) {' . "\n" . '      try {' . "\n" . '        http_request = new ActiveXObject("Microsoft.XMLHTTP");' . "\n" . '      } catch (e) {}' . "\n" . '    }' . "\n" . '  }' . "\n\n" . '  if (!http_request) {' . "\n" . '    alert("Ende : Kann keine XMLHTTP-Instanz erzeugen");' . "\n" . '    return false;' . "\n" . '  }' . "\n" . '  http_request.onreadystatechange = response_processing_list;' . "\n" . '  http_request.open("GET", url, true);' . "\n" . '  http_request.send(null);' . "\n\n" . '}' . "\n\n" . 'function response_processing_list() {' . "\n" . '  if (http_request.readyState == 1) {' . "\n" . '  } else if (http_request.readyState == 4) {' . "\n" . '    if (http_request.status == 200) {' . "\n" . '      document.getElementById(box_id+"_2").innerHTML = http_request.responseText;' . "\n" . '    } else {' . "\n" . '      alert("Bei dem Request ist ein Problem aufgetreten.");' . "\n" . '    }' . "\n" . '  }' . "\n" . '}' . "\n\n" . '/* ]]> */' . "\n" . '</script>' . "\n";
 $smarty->assign(array('form_begin_tax_rates' => xos_draw_form('tax_rates', FILENAME_PRODUCTS_ATTRIBUTES, '', 'get'), 'pull_down_tax_rates' => xos_draw_pull_down_menu('selected_tax_rate_id', $tax_rates_final_array, $_GET['selected_tax_rate_id'], 'id="tax_rates_final_id" class="smallText" onchange="this.form.submit();"'), 'hidden_fields' => xos_draw_hidden_field('pID', $pID) . xos_draw_hidden_field('cPath', $cPath) . xos_draw_hidden_field('categories_or_pages_id', $categories_or_pages_id) . xos_draw_hidden_field('manufacturers_id', $manufacturers_id) . xos_draw_hidden_field('max_rows', $_GET['max_rows']) . xos_draw_hidden_field('max_products_in_pullwown', $_GET['max_products_in_pullwown']) . xos_draw_hidden_field('option_page', $_GET['option_page']) . xos_draw_hidden_field('value_page', $_GET['value_page']) . xos_draw_hidden_field('attribute_page', $_GET['attribute_page']) . (SESSID ? xos_draw_hidden_field(xos_session_name(), xos_session_id()) : ''), 'form_begin_attributes' => '<form name="attribute" action="' . xos_href_link(FILENAME_PRODUCTS_ATTRIBUTES, 'action=' . $form_action . '&' . $parameter_string) . '" method="post">', 'previous_product_the_same' => $previous_product_is_the_same, 'next_product_the_same' => $next_product_is_the_same, 'javascript' => $javascript, 'update_prices' => 'updatePrices(true, true)', 'split_page' => $attributes_split->display_links($attributes_query_numrows, $_GET['max_rows'] ? $_GET['max_rows'] : MAX_ROW_LISTS_OPTIONS, MAX_DISPLAY_PAGE_LINKS, $attribute_page, $cmm_parameter_string . '&option_page=' . $option_page . '&value_page=' . $value_page, 'attribute_page'), 'attributes' => $attributes_value));
 if ($action != 'update_attribute') {
     $smarty->assign('insert_new_attribute', true);
     $products = xos_db_query("select distinct p.products_id, pd.products_name from " . TABLE_PRODUCTS . " p, " . TABLE_PRODUCTS_DESCRIPTION . " pd, " . TABLE_PRODUCTS_TO_CATEGORIES . " p2c where" . ($pID ? " pd.products_id ='" . $pID . "' and" : "") . " pd.products_id = p.products_id and pd.products_id = p2c.products_id and pd.language_id = '" . (int) $_SESSION['used_lng_id'] . "'" . ($categories_or_pages_id ? " and (" . $includes_categories . ")" : "") . ($manufacturers_id ? " and p.manufacturers_id ='" . $manufacturers_id . "'" : "") . " order by pd.products_name LIMIT " . ($_GET['max_products_in_pullwown'] ? $_GET['max_products_in_pullwown'] : MAX_PRODUCTS_IN_PULLDOWN) . "");
     if (xos_db_num_rows($products) > 0) {
         $inputs_products_name = '<select name="products_id" class="smallText">';
         while ($products_values = xos_db_fetch_array($products)) {
             $inputs_products_name .= '<option value="' . $products_values['products_id'] . '">' . $products_values['products_name'] . '</option>';
         }
         $inputs_products_name .= '</select>';
     } else {
         $smarty->assign('no_products', true);
     }
     $inputs_options_name = '<select name="options_id" class="smallText" onchange="update_option_values(this.form);">';
     $options = xos_db_query("select distinct po.* from " . TABLE_PRODUCTS_OPTIONS . " po, " . TABLE_PRODUCTS_OPTIONS_VALUES_TO_PRODUCTS_OPTIONS . " pov2po where po.products_options_id = pov2po.products_options_id and po.language_id = '" . (int) $_SESSION['used_lng_id'] . "' order by po.products_options_id");
     while ($options_values = xos_db_fetch_array($options)) {
Exemplo n.º 4
0
 function process_button()
 {
     global $order, $currencies;
     switch (MODULE_PAYMENT_SECPAY_CURRENCY) {
         case 'Default Currency':
             $sec_currency = DEFAULT_CURRENCY;
             break;
         case 'Any Currency':
         default:
             $sec_currency = $_SESSION['currency'];
             break;
     }
     switch (MODULE_PAYMENT_SECPAY_TEST_STATUS) {
         case 'Always Fail':
             $test_status = 'false';
             break;
         case 'Production':
             $test_status = 'live';
             break;
         case 'Always Successful':
         default:
             $test_status = 'true';
             break;
     }
     $process_button_string = xos_draw_hidden_field('merchant', MODULE_PAYMENT_SECPAY_MERCHANT_ID) . xos_draw_hidden_field('trans_id', STORE_NAME . date('Ymdhis')) . xos_draw_hidden_field('amount', number_format($order->info['total'] * $currencies->get_value($sec_currency), $currencies->currencies[$sec_currency]['decimal_places'], '.', '')) . xos_draw_hidden_field('bill_name', $order->billing['firstname'] . ' ' . $order->billing['lastname']) . xos_draw_hidden_field('bill_addr_1', $order->billing['street_address']) . xos_draw_hidden_field('bill_addr_2', $order->billing['suburb']) . xos_draw_hidden_field('bill_city', $order->billing['city']) . xos_draw_hidden_field('bill_state', $order->billing['state']) . xos_draw_hidden_field('bill_post_code', $order->billing['postcode']) . xos_draw_hidden_field('bill_country', $order->billing['country']['title']) . xos_draw_hidden_field('bill_tel', $order->customer['telephone']) . xos_draw_hidden_field('bill_email', $order->customer['email_address']) . xos_draw_hidden_field('ship_name', $order->delivery['firstname'] . ' ' . $order->delivery['lastname']) . xos_draw_hidden_field('ship_addr_1', $order->delivery['street_address']) . xos_draw_hidden_field('ship_addr_2', $order->delivery['suburb']) . xos_draw_hidden_field('ship_city', $order->delivery['city']) . xos_draw_hidden_field('ship_state', $order->delivery['state']) . xos_draw_hidden_field('ship_post_code', $order->delivery['postcode']) . xos_draw_hidden_field('ship_country', $order->delivery['country']['title']) . xos_draw_hidden_field('cur', $sec_currency) . xos_draw_hidden_field('callback', xos_href_link(FILENAME_CHECKOUT_PROCESS, '', 'SSL', false) . ';' . xos_href_link(FILENAME_CHECKOUT_PAYMENT, 'payment_error=' . $this->code, 'SSL', false)) . xos_draw_hidden_field(xos_session_name(), xos_session_id()) . xos_draw_hidden_field('options', 'test_status=' . $test_status . ',dups=false,cb_post=true,cb_flds=' . xos_session_name());
     return $process_button_string;
 }
Exemplo n.º 5
0
        if ($check_admin['check_firstname'] != $firstname) {
            $_GET['login'] = '******';
        } else {
            $_GET['login'] = '******';
            $makePassword = xos_create_random_value(7);
            @(require DIR_FS_SMARTY . 'admin/languages/' . $_SESSION['language'] . '/' . FILENAME_LOGIN);
            $email_to_admin = new mailer($check_admin['check_firstname'] . ' ' . $check_admin['admin_lastname'], $check_admin['check_email_address'], ADMIN_EMAIL_SUBJECT, '', sprintf(ADMIN_EMAIL_TEXT, $check_admin['check_firstname'], HTTP_SERVER . DIR_WS_ADMIN, $check_admin['check_email_address'], $makePassword, STORE_OWNER), STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS);
            if (!$email_to_admin->send()) {
                $mailer_error_message = sprintf(ERROR_PHPMAILER, $email_to_admin->ErrorInfo);
            } else {
                xos_db_query("update " . TABLE_ADMIN . " set admin_password = '******' where admin_id = '" . $check_admin['check_id'] . "'");
            }
        }
    }
}
$javascript = '<script type="text/javascript">' . "\n" . '/* <![CDATA[ */' . "\n" . 'function center() {' . "\n" . '  var height = document.getElementById("text").offsetHeight;' . "\n" . '  var marg = (height / 2);' . "\n" . '  document.getElementById("spacer").style.margin = "-" + marg + "px" + " 0px" + " 0px" + " 0px";' . "\n" . '}' . "\n\n" . '$(function(){' . "\n" . '  if (document.cookie.indexOf("' . xos_session_name() . '=' . xos_session_id() . '") != -1) {' . "\n" . '    $("#cookie_error").css("visibility", "hidden");' . "\n" . '  }' . "\n" . '});' . "\n" . '/* ]]> */' . "\n" . '</script>' . "\n";
require DIR_WS_INCLUDES . 'html_header_with_special_stylesheet.php';
require DIR_WS_INCLUDES . 'footer.php';
if (SESSION_FORCE_COOKIE_USE == 'true' && !isset($_COOKIE[session_name()])) {
    $smarty->assign('cookie_not_accepted', true);
}
if ($_GET['login'] == 'success') {
    $smarty->assign('login_success', true);
} elseif ($_GET['login'] == 'fail') {
    $smarty->assign('login_fail', true);
}
if (isset($_SESSION['password_forgotten'])) {
    $smarty->assign('try_over_3_times', true);
} elseif (isset($mailer_error_message)) {
    $smarty->assign(array('mailer_error_message' => $mailer_error_message, 'link_filename_password_forgotten' => xos_href_link(FILENAME_PASSWORD_FORGOTTEN)));
}
Exemplo n.º 6
0
function xos_hide_session_id()
{
    global $session_started;
    if ($session_started == true && SESSID) {
        return xos_draw_hidden_field(xos_session_name(), xos_session_id());
    }
}
Exemplo n.º 7
0
    } else {
        if (isset($_GET[session_name()])) {
            header("HTTP/1.1 404 Not Found");
            header("Status: 404 Not Found");
            die('<!DOCTYPE html><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1>The requested document was not found on this server.<p></p><hr /><address>Web Server at ' . HTTP_SERVER . '</address></body></html>');
        }
    }
} else {
    if (!isset($_COOKIE[session_name()]) && isset($_GET[session_name()]) || isset($_COOKIE[session_name()]) && isset($_GET[session_name()]) && $request_type == 'SSL' && ENABLE_SSL == 'true' && $_COOKIE[session_name()] != $_GET[session_name()] && HTTP_COOKIE_DOMAIN != HTTPS_COOKIE_DOMAIN) {
        setcookie(session_name(), $_GET[session_name()], 0, $cookie_path, $cookie_domain);
    }
    xos_session_start();
    $session_started = true;
}
// Define the SESSID
define('SESSID', empty($_COOKIE[session_name()]) ? xos_session_name() . '=' . xos_session_id() : '');
//  if ($session_started && !preg_match('/^(?:(?:[a-zA-Z0-9,-]{26})|(?:[a-zA-Z0-9,-]{32}))$/i', session_id())) session_regenerate_id(true);
if ($session_started && !preg_match('/^[a-zA-Z0-9,-]{22,40}$/i', session_id())) {
    session_regenerate_id(true);
}
// initialize a session token
if (!isset($_SESSION['sessiontoken'])) {
    $_SESSION['sessiontoken'] = md5(xos_rand() . xos_rand() . xos_rand() . xos_rand());
}
// verify the ssl_session_id if the feature is enabled
if ($request_type == 'SSL' && SESSION_CHECK_SSL_SESSION_ID == 'true' && ENABLE_SSL == 'true' && $session_started == true) {
    $ssl_session_id = getenv('SSL_SESSION_ID');
    if (!isset($_SESSION['SESSION_SSL_ID'])) {
        $_SESSION['SESSION_SSL_ID'] = $ssl_session_id;
    }
    if ($_SESSION['SESSION_SSL_ID'] != $ssl_session_id) {
Exemplo n.º 8
0
         if ($check_admin['check_firstname'] != $firstname) {
             $_GET['login'] = '******';
         } else {
             $_GET['login'] = '******';
             $makePassword = xos_create_random_value(7);
             @(require DIR_FS_SMARTY . 'admin/languages/' . $_SESSION['language'] . '/' . FILENAME_LOGIN);
             $email_to_admin = new mailer($check_admin['check_firstname'] . ' ' . $check_admin['admin_lastname'], $check_admin['check_email_address'], ADMIN_EMAIL_SUBJECT, '', sprintf(ADMIN_EMAIL_TEXT, $check_admin['check_firstname'], HTTP_SERVER . DIR_WS_ADMIN, $check_admin['check_email_address'], $makePassword, STORE_OWNER), STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS);
             if (!$email_to_admin->send()) {
                 $mailer_error_message = sprintf(ERROR_PHPMAILER, $email_to_admin->ErrorInfo);
             } else {
                 xos_db_query("update " . TABLE_ADMIN . " set admin_password = '******' where admin_id = '" . $check_admin['check_id'] . "'");
             }
         }
     }
 }
 $javascript = '<script>' . "\n" . '$(function(){' . "\n" . '  if (document.cookie.indexOf("' . xos_session_name() . '=' . xos_session_id() . '") != -1) {' . "\n" . '    $("#cookie_error").css("display", "none");' . "\n" . '  }' . "\n" . '});' . "\n" . '</script>' . "\n";
 require DIR_WS_INCLUDES . 'html_header.php';
 require DIR_WS_INCLUDES . 'footer.php';
 if (SESSION_FORCE_COOKIE_USE == 'true' && !isset($_COOKIE[session_name()])) {
     $smarty->assign('cookie_not_accepted', true);
 }
 if ($_GET['login'] == 'success') {
     $smarty->assign('login_success', true);
 } elseif ($_GET['login'] == 'fail') {
     $smarty->assign('login_fail', true);
 }
 if (isset($_SESSION['password_forgotten'])) {
     $smarty->assign('try_over_3_times', true);
 } elseif (isset($mailer_error_message)) {
     $smarty->assign(array('mailer_error_message' => $mailer_error_message, 'link_filename_password_forgotten' => xos_href_link(FILENAME_PASSWORD_FORGOTTEN)));
 }
Exemplo n.º 9
0
 function display_links($query_numrows, $max_rows_per_page, $max_page_links, $current_page_number, $parameters = '', $page_name = 'page')
 {
     if (xos_not_null($parameters) && substr($parameters, -1) != '&') {
         $parameters .= '&';
     }
     // calculate number of pages needing links
     $num_pages = ceil($query_numrows / $max_rows_per_page);
     $pages_array = array();
     for ($i = 1; $i <= $num_pages; $i++) {
         $pages_array[] = array('id' => $i, 'text' => $i);
     }
     if ($num_pages > 1) {
         $display_links = xos_draw_form('pages', basename($_SERVER['PHP_SELF']), '', 'get');
         if ($current_page_number > 1) {
             $display_links .= '<a href="' . xos_href_link(basename($_SERVER['PHP_SELF']), $parameters . $page_name . '=' . ($current_page_number - 1)) . '" class="splitPageLink">' . PREVNEXT_BUTTON_PREV . '</a>&nbsp;&nbsp;';
         } else {
             $display_links .= PREVNEXT_BUTTON_PREV . '&nbsp;&nbsp;';
         }
         $display_links .= sprintf(TEXT_RESULT_PAGE, xos_draw_pull_down_menu($page_name, $pages_array, $current_page_number, 'onchange="this.form.submit();"'), $num_pages);
         if ($current_page_number < $num_pages && $num_pages != 1) {
             $display_links .= '&nbsp;&nbsp;<a href="' . xos_href_link(basename($_SERVER['PHP_SELF']), $parameters . $page_name . '=' . ($current_page_number + 1)) . '" class="splitPageLink">' . PREVNEXT_BUTTON_NEXT . '</a>';
         } else {
             $display_links .= '&nbsp;&nbsp;' . PREVNEXT_BUTTON_NEXT;
         }
         if ($parameters != '') {
             if (substr($parameters, -1) == '&') {
                 $parameters = substr($parameters, 0, -1);
             }
             $pairs = explode('&', $parameters);
             while (list(, $pair) = each($pairs)) {
                 list($key, $value) = explode('=', $pair);
                 $display_links .= xos_draw_hidden_field(rawurldecode($key), rawurldecode($value));
             }
         }
         if (SESSID) {
             $display_links .= xos_draw_hidden_field(xos_session_name(), xos_session_id());
         }
         $display_links .= '</form>';
     } else {
         $display_links = sprintf(TEXT_RESULT_PAGE, $num_pages, $num_pages);
     }
     return $display_links;
 }