get_nonce PHP代码示例

示例#1

0

显示文件

文件： wpci_helper.php 项目： asalce/wp-ci

function nonce($action = null)
{
    echo get_nonce($action);
}

示例#2

0

显示文件

文件： components.php 项目： RobAnt/GetSimple-Plugins

echo $i18n['ADD_COMPONENT'];
?>
</a>
		<div class="clear"></div>
	</div>
	
	<form class="manyinputs" action="<?php 
echo htmlentities($_SERVER['PHP_SELF'], ENT_QUOTES);
?>
" method="post" accept-charset="utf-8" >
		<input type="hidden" id="id" value="<?php 
echo @$count;
?>
" />
		<input type="hidden" id="nonce" name="nonce" value="<?php 
echo get_nonce("modify_components");
?>
" />
		<p><input type="submit" class="submit" name="submitted" id="button" value="<?php 
echo $i18n['SAVE_COMPONENTS'];
?>
" /> &nbsp;&nbsp;<?php 
echo $i18n['OR'];
?>
&nbsp;&nbsp; <a class="cancel" href="theme.php"><?php 
echo $i18n['CANCEL'];
?>
</a></p>

		<div id="divTxt"></div> 
		<?php

示例#3

0

显示文件

文件： profile.php 项目： CodeCharming/GetSimpleCMS

			<div class="edit-nav clearfix" >
				<?php 
exec_action(get_filename_id() . '-edit-nav');
?>
			</div>		
			<?php 
exec_action(get_filename_id() . '-body');
?>
			
			<!-- user form -->
			<form class="largeform" action="<?php 
myself();
?>
" method="post" accept-charset="utf-8" >
			<input id="nonce" name="nonce" type="hidden" value="<?php 
echo get_nonce("save_profile");
?>
" />
			<?php 
if ($adding === true) {
    ?>
 <input id="add" name="add" type="hidden" value="1" /> <?php 
}
?>
		
			<div class="leftsec">
				<p><label for="user" ><?php 
i18n('LABEL_USERNAME');
?>
:</label><input class="text" id="user" name="user" type="text" <?php 
echo $adding === true ? '' : 'readonly';

示例#4

0

显示文件

文件： template_functions.php 项目： Emmett-Brown/linea

function get_pages_menu_content($parent, $menu, $level)
{
    global $pagesSorted;
    $items = array();
    foreach ($pagesSorted as $page) {
        $items[(string) $page['url']] = $page;
    }
    if (count($items) > 0) {
        foreach ($items as $page) {
            $dash = "";
            if ($page['parent'] != '') {
                $parentdata = getXML(GSDATAPAGESPATH . $page['parent'] . '.xml');
                $parentTitle = $parentdata->parent;
                $dash = "<b>" . $parentTitle . "</b>:" . $page['parent'] . " ";
            }
            $menu .= '<tr id="tr-' . $page['url'] . '" >';
            if ($page['title'] == '') {
                $page['title'] = '[No Title] &nbsp;&raquo;&nbsp; <em>' . $page['url'] . '</em>';
            }
            if ($page['menuStatus'] != '') {
                $page['menuStatus'] = ' <sup>[' . i18n_r('MENUITEM_SUBTITLE') . ']</sup>';
            } else {
                $page['menuStatus'] = '';
            }
            if ($page['private'] != '') {
                $page['private'] = ' <sup>[' . i18n_r('PRIVATE_SUBTITLE') . ']</sup>';
            } else {
                $page['private'] = '';
            }
            if ($page['url'] == 'index') {
                $homepage = ' <sup>[' . i18n_r('HOMEPAGE_SUBTITLE') . ']</sup>';
            } else {
                $homepage = '';
            }
            $menu .= '<td class="pagetitle">' . $dash . '<a title="' . i18n_r('EDITPAGE_TITLE') . ': ' . cl($page['title']) . '" href="cedit.php?id=' . $page['url'] . '" >' . cl($page['title']) . '</a><span class="showstatus toggle" >' . $homepage . $page['menuStatus'] . $page['private'] . '</span></td>';
            $menu .= '<td style="width:80px;text-align:right;" ><span>' . shtDate($page['pubDate']) . '</span></td>';
            $menu .= '<td class="secondarylink" >';
            $menu .= '<a title="' . i18n_r('VIEWPAGE_TITLE') . ': ' . cl($page['title']) . '" target="_blank" href="' . find_url($page['url'], $page['parent']) . '">#</a>';
            $menu .= '</td>';
            if ($page['url'] != 'index') {
                $menu .= '<td class="delete" ><a class="delconfirm" href="cdeletefile.php?id=' . $page['url'] . '&amp;nonce=' . get_nonce("cdelete", "cdeletefile.php") . '" title="' . i18n_r('DELETEPAGE_TITLE') . ': ' . cl($page['title']) . '" >&times;</a></td>';
            } else {
                $menu .= '<td class="delete" ></td>';
            }
            $menu .= '</tr>';
        }
    }
    return $menu;
}

示例#5

0

显示文件

文件： index.php 项目： elucidat/website-integration-example

    foreach ($fields as $key => $value) {
        $r[] = rawurlencode($key) . "=" . rawurlencode($value);
    }
    return implode($delim, $r);
    //return complete base string
}
/**
 * Returns typical headers needed for a request
 * @param $consumer_key
 * @param $nonce
 */
function auth_headers($consumer_key, $nonce = '')
{
    return array('oauth_consumer_key' => $consumer_key, 'oauth_nonce' => $nonce, 'oauth_signature_method' => 'HMAC-SHA1', 'oauth_timestamp' => time(), 'oauth_version' => '1.0');
}
$nonce = get_nonce('https://api.elucidat.com/v2/releases/launch', $api_key, $api_secret);
$headers = auth_headers($api_key, $nonce);
$fields = array('release_code' => $release_code, 'name' => $learner_name, 'email_address' => $learner_email);
$result = call_elucidat($headers, $fields, 'GET', 'https://api.elucidat.com/v2/releases/launch', $api_secret);
?>
<!DOCTYPE html>
<!--[if IE 6]>         <html class="no-js ie6 ie-lt9"> <![endif]-->
<!--[if IE 7]>         <html class="no-js ie7 ie-lt9"> <![endif]-->
<!--[if IE 8]>         <html class="no-js ie8 ie-lt9"> <![endif]-->
<!--[if IE 9]>         <html class="no-js ie9"> <![endif]-->
<!--[if gt IE 9]><!--> <html class="no-js"> <!--<![endif]-->
    <head>
        <meta charset="utf-8">
        <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
        <title>Elucidat website integration example</title>
        <!-- viewport behaviour IMPORTANT -->

示例#6

0

显示文件

文件： settings.php 项目： Vin985/clqweb

get_template('header', cl($SITENAME) . ' &raquo; ' . i18n_r('GENERAL_SETTINGS'));
?>
	
<?php 
include 'template/include-nav.php';
?>

<div class="bodycontent clearfix">
	
	<div id="maincontent">
		<form class="largeform" action="<?php 
myself();
?>
" method="post" accept-charset="utf-8" >
		<input id="nonce" name="nonce" type="hidden" value="<?php 
echo get_nonce("save_settings");
?>
" />
		
		<div class="main">
		<h3><?php 
i18n('WEBSITE_SETTINGS');
?>
</h3>
		
		<div class="leftsec">
			<p><label for="sitenameinput" ><?php 
i18n('LABEL_WEBSITE');
?>
:</label><input class="text" id="sitenameinput" name="sitename" type="text" value="<?php 
if (isset($SITENAME1)) {

示例#7

0

显示文件

文件： error_checking.php 项目： promil23/GetSimpleCMS

        doNotify(i18n_r('FLUSHCACHE-SUCCESS'), 'success');
        break;
    case 'del-error':
        doNotify('<b>' . i18n_r('ERROR') . ':</b> ' . i18n_r('ER_PROBLEM_DEL') . '.', 'error');
        break;
    case 'comp-success':
        doNotify(i18n_r('ER_COMPONENT_SAVE') . '. <a href="components.php?undo&nonce=' . get_nonce("undo") . '">' . i18n_r('UNDO') . '</a>', 'success');
        break;
    case 'comp-restored':
        doNotify(i18n_r('ER_COMPONENT_REST') . '. <a href="components.php?undo&nonce=' . get_nonce("undo") . '">' . i18n_r('UNDO') . '</a>', 'success');
        break;
    case 'profile-restored':
        doNotify(i18n_r('ER_PROFILE_RESTORED') . '. <a href="profile.php?undo&nonce=' . get_nonce("undo") . '&userid=' . $userid . '">' . i18n_r('UNDO') . '</a>', 'success');
        break;
    case 'settings-restored':
        doNotify(i18n_r('ER_OLD_RESTORED') . '. <a href="settings.php?undo&nonce=' . get_nonce("undo") . '">' . i18n_r('UNDO') . '</a>', 'success');
        break;
    default:
        if (isset($error)) {
            doNotify('<b>' . i18n_r('ERROR') . ':</b> ' . $error, 'error');
        } elseif (isset($_GET['cancel'])) {
            doNotify(i18n_r('ER_CANCELLED_FAIL'), 'error');
        } elseif (isset($_GET['logout'])) {
            doNotify(i18n_r('MSG_LOGGEDOUT'), 'info');
        } elseif (!empty($err)) {
            doNotify('<b>' . i18n_r('ERROR') . ':</b> ' . $err, 'error');
        } elseif (isset($success)) {
            doNotify($success, 'success');
        }
        break;
}

示例#8

0

显示文件

文件： plugins.php 项目： google-code-backups/get-simple-cms

        $plugin = antixss($pluginid);
        change_plugin($pluginid);
        redirect('plugins.php');
    }
}
// Variable settings
login_cookie_check();
$counter = 0;
$table = null;
$pluginfiles = getFiles(GSPLUGINPATH);
sort($pluginfiles);
$needsupdate = false;
foreach ($pluginfiles as $fi) {
    $pathExt = pathinfo($fi, PATHINFO_EXTENSION);
    $pathName = pathinfo_filename($fi);
    $setNonce = '&amp;nonce=' . get_nonce("set", "plugins.php");
    if ($pathExt == "php") {
        if ($live_plugins[$fi] == 'true') {
            $cls_Enabled = 'hidden';
            $cls_Disabled = '';
            $trclass = 'enabled';
        } else {
            $cls_Enabled = '';
            $cls_Disabled = 'hidden';
            $trclass = 'disabled';
        }
        $api_data = json_decode(get_api_details('plugin', $fi));
        $updatelink = null;
        if (is_object($api_data) && $api_data->status == 'successful') {
            if ($api_data->version > $plugin_info[$pathName]['version']) {
                $updatelink = '<br /><a class="updatelink" href="' . $api_data->path . '" target="_blank">' . i18n_r('UPDATE_AVAILABLE') . ' ' . $api_data->version . '</a>';

示例#9

0

显示文件

文件： archive.php 项目： Emmett-Brown/linea

$count = "0";
$path = tsl(GSBACKUPSPATH . 'zip/');
$filenames = getFiles($path);
natsort($filenames);
rsort($filenames);
foreach ($filenames as $file) {
    if ($file[0] != ".") {
        $timestamp = explode('_', $file);
        $name = lngDate($timestamp[0]);
        clearstatcache();
        $ss = stat($path . $file);
        $size = fSize($ss['size']);
        echo '<tr>
								<td><a title="' . i18n_r('DOWNLOAD') . ' ' . $name . '" href="download.php?file=' . $path . $file . '&amp;nonce=' . get_nonce("archive", "download.php") . '">' . $name . '</a></td>
								<td style="width:70px;text-align:right;" ><span>' . $size . '</span></td>
								<td class="delete" ><a class="delconfirm" title="' . i18n_r('DELETE_ARCHIVE') . ': ' . $name . '?" href="deletefile.php?zip=' . $file . '&amp;nonce=' . get_nonce("delete", "deletefile.php") . '">&times;</a></td>
							  </tr>';
        $count++;
    }
}
?>
			</table>
			<p><em><b><span id="pg_counter"><?php 
echo $count;
?>
</span></b> <?php 
i18n('TOTAL_ARCHIVES');
?>
</em></p>
		</div>
	</div>

示例#10

0

显示文件

文件： support.php 项目： RobAnt/GetSimple-Plugins

    $nonce = $_GET['nonce'];
    if (!check_nonce($nonce, "undo", "support.php")) {
        die("CSRF detected!");
    }
    $ufile = 'cp_settings.xml';
    undo($ufile, $path, $bakpath);
    header('Location: support.php?rest=true');
}
if (isset($_GET['restored'])) {
    $restored = 'true';
} else {
    $restored = 'false';
}
// were changes submitted?
if (isset($_POST['submitted'])) {
    $success = $i18n['SETTINGS_UPDATED'] . '. <a href="support.php?undo&nonce=' . get_nonce("restore", "support.php") . '">' . $i18n['UNDO'] . '</a>';
}
?>

<?php 
get_template('header', cl($SITENAME) . ' &raquo; ' . $i18n['SUPPORT']);
?>
	
	<h1><a href="<?php 
echo $SITEURL;
?>
" target="_blank" ><?php 
echo cl($SITENAME);
?>
</a> <span>&raquo;</span> <?php 
echo $i18n['SUPPORT'];

示例#11

0

显示文件

文件： error_checking.php 项目： RobAnt/GetSimple-Plugins

} elseif ($err == 'false') {
    echo '<div class="updated">' . $i18n['ER_SETTINGS_UPD'] . '. <a href="settings.php?undo&nonce=' . get_nonce("undo") . '">' . $i18n['UNDO'] . '</a></div>';
} elseif ($restored == 'true') {
    echo '<div class="updated">' . $i18n['ER_OLD_RESTORED'] . '. <a href="settings.php?undo&nonce=' . get_nonce("undo") . '">' . $i18n['UNDO'] . '</a></div>';
} elseif (@$_GET['rest'] == 'true') {
    echo '<div class="updated">' . $i18n['ER_OLD_RESTORED'] . '. <a href="support.php?undo&nonce=' . get_nonce("undo", "support.php") . '">' . $i18n['UNDO'] . '</a></div>';
} elseif ($err == 'true') {
    echo '<div class="error"><b>' . $i18n['ERROR'] . ':</b> ' . @$msg . '</div>';
} elseif ($update == 'pwd-success') {
    echo '<div class="updated">' . $i18n['ER_NEW_PWD_SENT'] . '. <a href="index.php">' . $i18n['LOGIN'] . '</a></div>';
} elseif ($update == 'pwd-error') {
    echo '<div class="error"><b>' . $i18n['ERROR'] . ':</b> ' . $i18n['ER_SENDMAIL_ERR'] . '.</div>';
} elseif ($update == 'del-success') {
    echo '<div class="updated">' . $i18n['ER_FILE_DEL_SUC'] . ': <b>' . $_GET['id'] . '</b></div>';
} elseif ($update == 'del-error') {
    echo '<div class="error"><b>' . $i18n['ERROR'] . ':</b> ' . $i18n['ER_PROBLEM_DEL'] . '.</div>';
} elseif ($update == 'comp-success') {
    echo '<div class="updated">' . $i18n['ER_COMPONENT_SAVE'] . '. <a href="components.php?undo&nonce=' . get_nonce("undo") . '">' . $i18n['UNDO'] . '</a></div>';
} elseif ($update == 'comp-restored') {
    echo '<div class="updated">' . $i18n['ER_COMPONENT_REST'] . '. <a href="components.php?undo&nonce=' . get_nonce("undo") . '">' . $i18n['UNDO'] . '</a></div>';
} elseif (isset($_GET['cancel'])) {
    echo '<div class="error">' . $i18n['ER_CANCELLED_FAIL'] . '</div>';
} elseif (isset($error)) {
    echo '<div class="error">' . $error . '</div>';
} elseif (isset($success)) {
    echo '<div class="updated">' . $success . '</div>';
} elseif (isset($_GET['err'])) {
    echo '<div class="error"><b>' . $i18n['ERROR'] . ':</b> ' . $_GET['err'] . '</div>';
} elseif (isset($_GET['success'])) {
    echo '<div class="updated">' . $_GET['success'] . '</div>';
}

示例#12

0

显示文件

文件： resetpassword.php 项目： kix23/GetSimpleCMS

	
	<div id="maincontent">
		<div class="main" >
		
		<h3><?php 
i18n('RESET_PASSWORD');
?>
</h3>
		<p class="desc"><?php 
i18n('MSG_PLEASE_EMAIL');
?>
</p>
		
		<form class="login" action="" method="post" >
			<input name="nonce" id="nonce" type="hidden" value="<?php 
echo get_nonce("reset_password");
?>
"/>
			<p><b><?php 
i18n('LABEL_USERNAME');
?>
:</b><br /><input class="text" name="username" type="text" value="" /></p>
			<p><input class="submit" type="submit" name="submitted" value="<?php 
echo i18n_r('SEND_NEW_PWD');
?>
" /></p>
		</form>
		<p class="cta"><a href="<?php 
echo $SITEURL;
?>
"><?php

示例#13

0

显示文件

文件： codetester.php 项目： relliance/easyphp-codetester-fix

?>
</a>
</div>

<div style="width:770px;margin:0px auto 2px auto;padding:0px 0px 0px 0px;color:black;font-size:18px;font-weight:bold;"><?php 
echo $t_ct_code;
?>
</div>
<form  method="post" action="codetester.php" style="width:760px;margin:0px auto 0px auto;padding:10px;background-color:#EEEEEE;-moz-border-radius:2px;-khtml-border-radius:2px;-webkit-border-radius:2px;border-radius:2px;">
	<textarea name="sourcecode" rows="10" style="width:748px;margin:0px;padding:5px;border:1px solid #c0c0c0;"><?php 
echo '' . trim(file_get_contents('codesource.php'));
?>
</textarea>
	<input type="hidden" name="to" value="interpretcode" />
        <input type="hidden" name="nonce" value="<?php 
echo get_nonce();
/* Russell, 2012-11-10 */
?>
" />
	<input type="submit" value="Interpret the code" class="submit" style="width:150px;margin:4px 0px 0px 0px;padding:0px;border:solid 1px silver;cursor:pointer;-moz-border-radius:2px;-khtml-border-radius:2px;-webkit-border-radius:2px;border-radius:2px;" />
</form>

<br />
<div style="width:770px;margin:0px auto 2px auto;padding:0px 0px 0px 0px;color:black;font-size:18px;font-weight:bold;"><?php 
echo $t_ct_codeinterpreted;
?>
</div>
<div style="width:760px;margin:0px auto 0px auto;padding:10px;font-size:12px;background-color:#FFF3AF;-moz-border-radius:2px;-khtml-border-radius:2px;-webkit-border-radius:2px;border-radius:2px;"><?php 
include 'codesource.php';
?>
</div>

示例#14

0

显示文件

文件： archive.php 项目： RobAnt/GetSimple-Plugins

$count = "0";
$path = tsl(GSBACKUPSPATH . 'zip/');
$filenames = getFiles($path);
natsort($filenames);
rsort($filenames);
foreach ($filenames as $file) {
    if ($file != "." && $file != ".." && $file != ".htaccess") {
        $timestamp = explode('_', $file);
        $name = shtDate($timestamp[0]);
        clearstatcache();
        $ss = @stat($path . $file);
        $size = fSize($ss['size']);
        echo '<tr>
							<td><a title="Download Archive ' . $name . '" target="_blank" href="download.php?file=' . $path . $file . '&nonce=' . get_nonce("archive", "download.php") . '">' . $name . '</a></td>
							<td style="width:70px;text-align:right;" ><span>' . $size . '</span></td>
							<td class="delete" ><a class="delconfirm" title="Delete Archive ' . $name . '?" href="deletefile.php?zip=' . $file . '&nonce=' . get_nonce("delete", "deletefile.php") . '">X</a></td>
						  </tr>';
        $count++;
    }
}
?>
		</table>
		<p><em><b><?php 
echo $count;
?>
</b> <?php 
echo $i18n['TOTAL_ARCHIVES'];
?>
</em></p>
		</div>
	</div>

示例#15

0

显示文件

文件： edit.php 项目： HelgeSverre/GetSimpleCMS

function getPublishedPageHead($editing = true, $path = '')
{
    global $id, $draftExists, $pageExists;
    echo '<h3 class="floated">' . ($editing ? i18n_r('PAGE_EDIT_MODE') : i18n_r('CREATE_NEW_PAGE')) . '</h3>';
    if (getDef('GSUSEDRAFTS', true) && $pageExists && getDef('GSSDRAFTSPUBLISHEDTAG', true)) {
        echo '<div class="title label label-ok unselectable">' . i18n_r('LABEL_PUBLISHED') . '</div>';
    }
    echo '<!-- pill edit navigation -->', "\n", '<div class="edit-nav clearfix" >';
    if ($editing) {
        echo '<a class="pageview" href="' . $path . '" target="_blank" accesskey="' . find_accesskey(i18n_r('VIEW')) . '" >' . i18n_r('VIEW') . '</a>';
        if ($path != '') {
            echo '<a class="pageclone" href="pages.php?id=' . $id . '&amp;action=clone&amp;nonce=' . get_nonce("clone", "pages.php") . '" >' . i18n_r('CLONE') . '</a>';
        }
    }
    exec_action(get_filename_id() . '-edit-nav');
    echo "\n</div>";
}

示例#16

0

显示文件

文件： cedit.php 项目： Emmett-Brown/linea

    echo '<a href="', find_url($url, $parent), '" target="_blank" accesskey="', find_accesskey(i18n_r('VIEW')), '" >', i18n_r('VIEW'), ' </a>';
}
?>
			<a href="#" id="metadata_toggle" accesskey="<?php 
echo find_accesskey(i18n_r('PAGE_OPTIONS'));
?>
" ><?php 
i18n('PAGE_OPTIONS');
?>
</a>
			<div class="clear" ></div>
		</div>	
			
		<form class="largeform" id="editform" action="cchangedata.php" method="post" accept-charset="utf-8" >
			<input id="nonce" name="nonce" type="hidden" value="<?php 
echo get_nonce("cedit", "cedit.php");
?>
" />			
			<input id="author" name="post-author" type="hidden" value="<?php 
echo $USR;
?>
" />	

			<!-- page title toggle screen -->
			<p id="edit_window">
				<label for="post-title" style="display:none;"><?php 
i18n('PAGE_TITLE');
?>
</label>
				<input class="text title" id="post-title" name="post-title" type="text" value="<?php 
echo $title;

示例#17

0

显示文件

文件： edit.php 项目： hatasu/appdroid

</a></li>
						<?php 
}
?>
						<li id="cancel-updates" class="alertme"><a href="pages.php?cancel" ><?php 
i18n('CANCEL');
?>
</a></li>
						<?php 
if ($url != 'index' && $url != '') {
    ?>
							<li class="alertme" ><a href="deletefile.php?id=<?php 
    echo $url;
    ?>
&amp;nonce=<?php 
    echo get_nonce("delete", "deletefile.php");
    ?>
" ><?php 
    echo strip_tags(i18n_r('ASK_DELETE'));
    ?>
</a></li>
						<?php 
}
?>
					</ul>
				</div>
				
			</div>
			
			<?php 
if ($url != '') {

示例#18

0

显示文件

文件： changedata.php 项目： kix23/GetSimpleCMS

 /**
  * do changedata ajax save checking for legacy
  * @param  str $url     [description]
  * @param  str $oldslug [description]
  */
 function changedataAjaxSave($url, $oldslug)
 {
     global $draft, $pageIsNew;
     if (isset($_POST['ajaxsave'])) {
         // force redirects
         //
         // @todo we update the slug with the assigned slug, but there could be other things plugins need to do when adding a page,
         //  that needs to be available to the page after, things like custom link menus, actions etc.
         //  for now we redirect, so pagestack works since it is not implemented yet for ajax
         if ($pageIsNew) {
             redirect('edit.php?id=' . $url . '&nodraft&upd=edit-success&ptype=new', true);
         }
         // ajax response wrapper, still using html parsing for now
         echo "<div>";
         // if this was an autosave add autosave response
         if (isset($_POST['autosave']) && $_POST['autosave'] == '1') {
             echo '<div class="autosavenotify">' . sprintf(i18n_r('AUTOSAVE_NOTIFY'), output_time(date())) . '</div>';
         }
         // setup error checking vars and include error checking for notifications
         $id = $url;
         $update = 'edit-success';
         $ptype = 'edit';
         if ($url !== $oldslug) {
             $oldid = $oldslug;
         }
         // if slug was changed set $oldid
         $upddraft = $draft;
         include 'template/error_checking.php';
         // send new inputs for slug changes and new nonces
         echo '<input id="nonce" name="nonce" type="hidden" value="' . get_nonce("edit", "edit.php") . '" />';
         echo '<input id="existing-url" name="existing-url" type="hidden" value="' . $url . '" />';
         echo '<input id="post-id" name="post-id" type="hidden" value="' . $url . '" />';
         echo "</div>";
         die;
     }
 }

示例#19

0

显示文件

文件： security_functions.php 项目： Foltys/Masopust

/**
 * Check Nonce
 *
 * @since 2.03
 * @author tankmiche
 * @uses get_nonce
 *
 * @param string $nonce
 * @param string $action
 * @param string $file Optional, default is empty string
 * @return bool
 */
function check_nonce($nonce, $action, $file = "")
{
    return $nonce === get_nonce($action, $file) || $nonce === get_nonce($action, $file, true);
}

示例#20

0

显示文件

文件： template_functions.php 项目： kix23/GetSimpleCMS

/**
 * get table row for pages display
 *
 * @since 3.4
 * @param  array $page   page array
 * @param  int $level    current level
 * @param  int $index    current index
 * @param  int $parent   parent index
 * @param  int $children number of children
 * @return str           html for table row
 */
function getPagesRow($page, $level, $index, $parent, $children)
{
    $indentation = $menu = '';
    // indentation
    $indent = '<span class="tree-indent"></span>';
    $last = '<span class="tree-indent indent-last">&ndash;</span>';
    // add indents based on level
    $indentation .= $level > 0 ? str_repeat($indent, $level - 1) : '';
    $indentation .= $level > 0 ? $last : '';
    // add indents or expanders
    $isParent = $children > 0;
    // add expanders in php
    // $expander = '<span class="tree-expander tree-expander-expanded"></span>';
    // $expander = $isParent ? $expander : '<span class="tree-indent"></span>';
    // $indentation = $indentation . $expander;
    // depth level identifiers
    $class = 'depth-' . $level;
    $class .= $isParent ? ' tree-parent' : '';
    $menu .= '<tr id="tr-' . $page['url'] . '" class="' . $class . '" data-depth="' . $level . '">';
    $pagetitle = $pagemenustatus = $pageprivate = $pagedraft = $pageindex = '';
    if ($page['title'] == '') {
        $pagetitle = '[No Title] &nbsp;&raquo;&nbsp; <em>' . $page['url'] . '</em>';
    } else {
        $pagetitle = $page['title'];
    }
    if ($page['menuStatus'] != '') {
        $pagemenustatus = ' <span class="label label-ghost">' . i18n_r('MENUITEM_SUBTITLE') . '</span>';
    }
    if ($page['private'] != '') {
        $pageprivate = ' <span class="label label-ghost">' . i18n_r('PRIVATE_SUBTITLE') . '</span>';
    }
    if (pageHasDraft($page['url'])) {
        $pagedraft = ' <span class="label label-ghost">' . lowercase(i18n_r('LABEL_DRAFT')) . '</span>';
    }
    if ($page['url'] == getDef('GSINDEXSLUG')) {
        $pageindex = ' <span class="label label-ghost">' . i18n_r('HOMEPAGE_SUBTITLE') . '</span>';
    }
    if (dateIsToday($page['pubDate'])) {
        $pagepubdate = ' <span class="datetoday">' . output_date($page['pubDate']) . '</span>';
    } else {
        $pagepubdate = '<span>' . output_date($page['pubDate']) . "</span>";
    }
    $pagetitle = cl($pagetitle);
    $menu .= '<td class="pagetitle">' . $indentation . '<a title="' . i18n_r('EDITPAGE_TITLE') . ': ' . var_out($pagetitle) . '" href="edit.php?id=' . $page['url'] . '" >' . $pagetitle . '</a>';
    $menu .= '<div class="showstatus toggle" >' . $pageindex . $pagedraft . $pageprivate . $pagemenustatus . '</div></td>';
    // keywords used for filtering
    $menu .= '<td style="width:80px;text-align:right;" ><span>' . $pagepubdate . '</span></td>';
    $menu .= '<td class="secondarylink" >';
    $menu .= '<a title="' . i18n_r('VIEWPAGE_TITLE') . ': ' . var_out($pagetitle) . '" target="_blank" href="' . find_url($page['url'], $page['parent']) . '">#</a>';
    $menu .= '</td>';
    // add delete buttons, exclude index page
    if ($page['url'] != 'index') {
        $menu .= '<td class="delete" ><a class="delconfirm" href="deletefile.php?id=' . $page['url'] . '&amp;nonce=' . get_nonce("delete", "deletefile.php") . '" title="' . i18n_r('DELETEPAGE_TITLE') . ': ' . cl($page['title']) . '" >&times;</a></td>';
    } else {
        $menu .= '<td class="delete" ></td>';
    }
    // add indexcolumn and tagcolumn for filtering
    $menu .= '<td class="indexColumn hidden">' . strip_tags(lowercase($pagetitle . $pageindex . $pagemenustatus . $pageprivate . $pagedraft)) . '</div></td>';
    // keywords used for filtering
    $menu .= '<td class="tagColumn hidden">' . str_replace(',', ' ', $page['meta']) . '</div></td>';
    // keywords used for filtering
    $menu .= '</tr>';
    return $menu;
}

示例#21

0

显示文件

文件： functions.inc.php 项目： relliance/easyphp-codetester-fix

function verify_nonce()
{
    $nonce = get_nonce();
    // Fetch the nonce from the last request
    remove_nonce();
    // clear it so it can't be used again now we have it locally
    session_regenerate_id(true);
    // replace old session, stops session fixation
    // only verify if nonce is sent and matches what is expected
    return isset($_POST['nonce']) and $_POST['nonce'] == $nonce;
}

示例#22

0

显示文件

文件： backups.php 项目： promil23/GetSimpleCMS

			<h3 class="floated"><?php 
i18n('PAGE_BACKUPS');
?>
</h3>
			
			<?php 
if ($counter > 0) {
    ?>
				<div class="edit-nav clearfix" ><a href="javascript:void(0)" id="filtertable" accesskey="<?php 
    echo find_accesskey(i18n_r('FILTER'));
    ?>
" ><?php 
    i18n('FILTER');
    ?>
</a> <a href="backups.php?deleteall&amp;nonce=<?php 
    echo get_nonce("deleteall");
    ?>
" title="<?php 
    i18n('DELETE_ALL_BAK');
    ?>
" accesskey="<?php 
    echo find_accesskey(i18n_r('ASK_DELETE_ALL'));
    ?>
" class="confirmation"  ><?php 
    i18n('ASK_DELETE_ALL');
    ?>
</a></div>
				<div id="filter-search">
					<form><input type="text" autocomplete="off" class="text" id="q" placeholder="<?php 
    echo strip_tags(lowercase(i18n_r('FILTER')));
    ?>

示例#23

0

显示文件

文件： backup-edit.php 项目： Emmett-Brown/linea

echo $id;
?>
&amp;nonce=<?php 
echo get_nonce("restore", "backup-edit.php");
?>
" accesskey="<?php 
echo find_accesskey(i18n_r('ASK_RESTORE'));
?>
" ><?php 
i18n('ASK_RESTORE');
?>
</a> <a href="backup-edit.php?p=delete&amp;id=<?php 
echo $id;
?>
&amp;nonce=<?php 
echo get_nonce("delete", "backup-edit.php");
?>
" title="<?php 
i18n('DELETEPAGE_TITLE');
?>
: <?php 
echo $title;
?>
?" id="delback" accesskey="<?php 
echo find_accesskey(i18n_r('ASK_DELETE'));
?>
" class="delconfirm noajax" ><?php 
i18n('ASK_DELETE');
?>
</a>
			<div class="clear"></div>

示例#24

0

显示文件

文件： plugins.php 项目： promil23/GetSimpleCMS

if ($pluginid) {
    if (check_nonce($nonce, "set_" . pathinfo_filename($pluginid), "plugins.php")) {
        $plugin = antixss($pluginid);
        change_plugin($plugin);
        redirect('plugins.php?success=' . i18n_r('PLUGIN_UPDATED'));
    } else {
        redirect('plugins.php?error=' . i18n_r('ERROR_OCCURED'));
    }
}
// Variable settings
$counter = 0;
$table = '';
$needsupdate = false;
$plugin_info_sorted = subval_sort($plugin_info, 'name');
foreach ($plugin_info_sorted as $pluginid => $plugininfo) {
    $setNonce = '&amp;nonce=' . get_nonce("set_" . $pluginid, "plugins.php");
    // @todo disabled plugins have a version of (str) 'disabled', should be 0 or null
    $pluginver = $plugininfo['version'] == 'disabled' ? 0 : $plugininfo['version'];
    if (plugin_active($pluginid)) {
        $cls_Enabled = 'hidden';
        $cls_Disabled = '';
        $trclass = 'enabled';
    } else {
        $cls_Enabled = '';
        $cls_Disabled = 'hidden';
        $trclass = 'disabled';
    }
    // get extend api for this plugin filename
    $api_data = json_decode(get_api_details('plugin', $pluginid));
    $updatelink = '';
    // api success

示例#25

0

显示文件

文件： log.php 项目： Foltys/Masopust

			<h3 class="floated"><?php 
i18n('VIEWING');
?>
 <?php 
i18n('LOG_FILE');
?>
: &lsquo;<em><?php 
echo $log_name;
?>
</em>&rsquo;</h3>
			<div class="edit-nav" >
				<a href="log.php?log=<?php 
echo $log_name;
?>
&action=delete&nonce=<?php 
echo get_nonce("delete");
?>
" accesskey="<?php 
echo find_accesskey(i18n_r('CLEAR_ALL_DATA'));
?>
" title="<?php 
i18n('CLEAR_ALL_DATA');
?>
 <?php 
echo $log_name;
?>
?" /><?php 
i18n('CLEAR_THIS_LOG');
?>
</a>
				<div class="clear"></div>

示例#26

0

显示文件

文件： provider_ftp_authorize.php 项目： rjz/getsimple-cloudbackup

    ?>
<div class="error">
	<p><?php 
    echo $error;
    ?>
</p>
</div>
<?php 
}
?>

<form method="post" action="?id=backup&action=authorize_ftp">

	<input type="hidden" name="_action" value="authorize_ftp" />
	<input type="hidden" name="_nonce" value="<?php 
echo get_nonce('authorize_ftp', $info['id']);
?>
" />

	<p>
		<label for="ftp_server">Server</label>
		<input type="text" id="ftp_server" name="ftp_server" value="" />
	</p>

	<p>
		<label for="ftp_username">Username</label>
		<input type="text" id="ftp_username" name="ftp_username" value="" />
	</p>

	<p>
		<label for="ftp_password">Password</label>

示例#27

0

显示文件

文件： upload.php 项目： HelgeSverre/GetSimpleCMS

        // file perms column
        if ($showperms) {
            $filePerms = substr(sprintf('%o', fileperms($path . $upload['name'])), -4);
            if ($isUnixHost) {
                $fileOwner = function_exists('posix_getpwuid') ? posix_getpwuid(fileowner($path . $upload['name'])) : '';
                $fileOwnerName = isset($fileOwner['name']) ? $fileOwner['name'] : '';
            } else {
                $fileOwnerName = getenv('USERNAME');
            }
            echo '<td style="width:70px;text-align:right;"><span>' . $fileOwnerName . '/' . $filePerms . '</span></td>';
        }
        echo '<td class="file_date right"><span class="' . (dateIsToday($upload['date']) ? 'datetoday' : '') . '">' . output_date($upload['date']) . '</span></td>';
        // delete
        echo '<td class="delete">';
        if ($allowdelete) {
            echo '<a class="delconfirm" title="' . i18n_r('DELETE_FILE') . ': ' . htmlspecialchars($upload['name']) . '" href="deletefile.php?file=' . rawurlencode($upload['name']) . '&amp;path=' . $urlPath . '&amp;nonce=' . get_nonce("delete", "deletefile.php") . '">&times;</a>';
        }
        echo '</td></tr>';
    }
}
exec_action('file-extras');
// @hook file-extras after file list table rows
echo '</tbody></table>';
if ($counter > 0) {
    $sizedesc = '(' . fSize($totalsize) . ')';
} else {
    $sizedesc = '';
}
$totalcount = (int) $counter + (int) $foldercount;
echo '<p><em><b><span id="pg_counter">' . $totalcount . '</span></b> ' . i18n_r('TOTAL_FILES') . ' ' . $sizedesc . '</em></p>';
?>

示例#28

0

显示文件

文件： theme-edit.php 项目： RobAnt/GetSimple-Plugins

		<?php 
$content = file_get_contents($relative . 'theme/' . tsl($TEMPLATE) . $TEMPLATE_FILE);
?>
		
		<form action="<?php 
echo htmlentities($_SERVER['PHP_SELF'], ENT_QUOTES);
?>
?t=<?php 
echo $TEMPLATE;
?>
&f=<?php 
echo $TEMPLATE_FILE;
?>
" method="post" >
			<input id="nonce" name="nonce" type="hidden" value="<?php 
echo get_nonce("save");
?>
" />
			<p><textarea name="content" id="codetext" ><?php 
echo htmlentities($content, ENT_QUOTES, 'UTF-8');
?>
</textarea></p>
			<input type="hidden" value="<?php 
echo tsl($TEMPLATE) . $TEMPLATE_FILE;
?>
" name="edited_file" />
			<?php 
exec_action('theme-edit-extras');
?>
			<p><input class="submit" type="submit" name="submitsave" value="<?php 
echo $i18n['BTN_SAVECHANGES'];

示例#29

0

显示文件

文件： theme.php 项目： promil23/GetSimpleCMS

	
<?php 
include 'template/include-nav.php';
?>

<div class="bodycontent clearfix">
	
	<div id="maincontent">
		<div class="main">
		<h3><?php 
i18n('CHOOSE_THEME');
?>
</h3>
		<form action="" method="post" accept-charset="utf-8" >
		<input id="nonce" name="nonce" type="hidden" value="<?php 
echo get_nonce("activate");
?>
" />			
		<?php 
$theme_path = str_replace(GSROOTPATH, '', GSTHEMESPATH);
if ($SITEURL) {
    echo '<p><b>' . i18n_r('THEME_PATH') . ': &nbsp;</b> <code>' . $SITEURL . $theme_path . $TEMPLATE . '/</code></p>';
}
?>
		<p><select id="theme_select" class="text" style="width:250px;" name="template" >
				<?php 
echo $theme_options;
?>
			</select>&nbsp;&nbsp;&nbsp;<input class="submit" type="submit" name="submitted" value="<?php 
i18n('ACTIVATE_THEME');
?>

示例#30

0

显示文件

文件： DM_PE_pageedit.php 项目： n00dles/DM_PE_pagedit

function DM_PE_getPages($parent, $menu, $level)
{
    global $pagesSorted;
    $items = array();
    foreach ($pagesSorted as $page) {
        if ($page['parent'] == $parent) {
            $items[(string) $page['url']] = $page;
        }
    }
    $toggleMenu = get_nonce("menu", "toggle.php");
    $togglePrivate = get_nonce("private", "toggle.php");
    $gsVersion = get_site_version(false);
    if (count($items) > 0) {
        foreach ($items as $page) {
            $dash = "";
            if ($page['parent'] != '') {
                $page['parent'] = $page['parent'] . "/";
            }
            for ($i = 0; $i <= $level - 1; $i++) {
                if ($i != $level - 1) {
                    $dash .= '<span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span>';
                } else {
                    $dash .= '<span>&nbsp;&nbsp;&ndash;&nbsp;&nbsp;&nbsp;</span>';
                }
            }
            $delNonce = get_nonce("delete", "deletefile.php");
            $cloneNonce = get_nonce("clone", "pages.php");
            $menuNonce = get_nonce("menu", "toggle.php");
            $privateNonce = get_nonce("private", "toggle.php");
            $menu .= '<tr class="hover" id="tr-' . $page['url'] . '" >';
            if ($page['title'] == '') {
                $page['title'] = '[No Title] &nbsp;&raquo;&nbsp; <em>' . $page['url'] . '</em>';
            }
            if ($page['menuStatus'] != '') {
                $page['menuStatus'] = ' <sup>[' . i18n_r('MENUITEM_SUBTITLE') . ']</sup>';
            } else {
                $page['menuStatus'] = '';
            }
            if ($page['private'] != '') {
                $page['private'] = ' <sup>[' . i18n_r('PRIVATE_SUBTITLE') . ']</sup>';
            } else {
                $page['private'] = '';
            }
            if ($page['url'] == 'index') {
                $homepage = ' <sup>[' . i18n_r('HOMEPAGE_SUBTITLE') . ']</sup>';
            } else {
                $homepage = '';
            }
            $menu .= '<td class="pagetitle">' . $dash . '<a title="' . i18n_r('EDITPAGE_TITLE') . ': ' . cl($page['title']) . '" href="edit.php?id=' . $page['url'] . '" >' . cl($page['title']) . '</a><span class="showstatus toggle" >' . $homepage . $page['menuStatus'] . $page['private'] . '</span></td>';
            $menu .= '<td style="width:80px;text-align:left;" ><span>' . shtDate($page['pubDate']) . '</span></td>';
            $menu .= '<td style="width:24px;text-align:right;" >';
            /**
            			$menu .= '<a href="edit.php?id='.$page['url'].'"><img src="../plugins/DM_PE_pageedit/images/document_edit.gif" title="Edit Page" alt="Edit Page" /></a>&nbsp;'; 
            			$menu .= '<a href="edit.php?parent='.$page['url'].'"><img src="../plugins/DM_PE_pageedit/images/document_right.gif" title="Create Child Page" alt="Create Child Page" /></a>&nbsp;'; 
            			$menu .= '<a href="pages.php?id='.$page['url'].'&action=clone&nonce='.$cloneNonce.'"><img src="../plugins/DM_PE_pageedit/images/documents_duplicate.gif" title="Clone Page" alt="Clone Page" /></a>&nbsp;';
            				 
            			
            			if ($page['menuStatus'] != '' ) {
            				$menu .= '<a href="../plugins/DM_PE_pageedit/toggle.php?func=menu&id='.$page['url'].'&nonce='.$menuNonce.'" class="toggleMenu"><img src="../plugins/DM_PE_pageedit/images/menu.gif" title="Toggle Menu Off" alt="Toggle Menu Off" /></a>&nbsp;'; 	
            			} else {
            				$menu .= '<a href="../plugins/DM_PE_pageedit/toggle.php?func=menu&id='.$page['url'].'&nonce='.$menuNonce.'" class="toggleMenu"><img src="../plugins/DM_PE_pageedit/images/menu_off.gif" title="Toggle Menu On" alt="Toggle Menu On" /></a>&nbsp;'; 					
            			}
            			
            			if ($page['private'] != '' ) {
            				$menu .= '<a href="../plugins/DM_PE_pageedit/toggle.php?func=private&id='.$page['url'].'&nonce='.$privateNonce.'" class="togglePrivate"><img src="../plugins/DM_PE_pageedit/images/security_off.gif" title="Toggle Private On" alt="Toggle Private On" /></a>&nbsp;'; 	
            			} else {
            				$menu .= '<a href="../plugins/DM_PE_pageedit/toggle.php?func=private&id='.$page['url'].'&nonce='.$privateNonce.'" class="togglePrivate"><img src="../plugins/DM_PE_pageedit/images/security.gif" title="Toggle Private Off" alt="Toggle Private Off" /></a>&nbsp;'; 					
            			}
            			$menu .= '<a title="'.i18n_r('VIEWPAGE_TITLE').': '. cl($page['title']) .'" target="_blank" href="'. find_url($page['url'],$page['parent']) .'"><img src="../plugins/DM_PE_pageedit/images/theme.gif" title="View Page" alt="View Page" /></a>&nbsp;'; 					
            			
            			if ($page['url'] != 'index' ) {
            			$menu .= '<a href="deletefile.php?id='.$page['url'].'&nonce='.$delNonce.'"  class="delconfirm" title="Delete Page: '.$page['url'].'"><img src="../plugins/DM_PE_pageedit/images/trash.gif" title="Delete Page" alt="Clone Page" /></a>'; 
            			} else {
            				$menu .= '';
            			}
            			**/
            $menu .= '<div class="dropdown">';
            $menu .= '<img src="images/icon_spacer.gif" alt="" class="sprite icon dropdownIcon ">';
            /*
            $menu .= '<ul class="dropdownmenu">';
            $menu .= '<li id="save-close" ><a href="#" >Save &amp; Close</a></li>';
            $menu .= '<li><a href="pages.php?id=test&amp;action=clone&amp;nonce=16992ac218003b7b85b536aa5523af78468ae4c2" >Clone</a></li>';
            $menu .= '<li id="cancel-updates" class="alertme"><a href="pages.php?cancel" >Cancel</a></li>';
            $menu .= '<li class="alertme" ><a href="deletefile.php?id=test&amp;nonce=b6ed4bcaf21d3a569ca66db6d2a39b9a30b5e8cb" >Delete</a></li>';
            $menu .= '</ul>';
            */
            $menu .= '</div>';
            $menu .= '</td>';
            $menu .= '</tr>';
            $menu = DM_PE_getPages((string) $page['url'], $menu, $level + 1);
        }
    }
    return $menu;
}

PHP get_nonce示例