| Zeile 6 | Zeile 6 |
|---|
* Website: http://mybb.com
* License: http://mybb.com/about/license
*
|
* Website: http://mybb.com
* License: http://mybb.com/about/license
*
|
* $Id: index.php 5621 2011-09-26 18:35:54Z ralgith $
| * $Id$
|
*/
define("IN_MYBB", 1);
| */
define("IN_MYBB", 1);
|
| Zeile 62 | Zeile 62 |
|---|
unset($user);
// Load Admin CP style
|
unset($user);
// Load Admin CP style
|
if(!$cp_style)
| if(!isset($cp_style))
|
{
if(!empty($mybb->settings['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/".$mybb->settings['cpstyle']."/main.css"))
{
| {
if(!empty($mybb->settings['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/".$mybb->settings['cpstyle']."/main.css"))
{
|
| Zeile 79 | Zeile 79 |
|---|
$logged_out = false;
$fail_check = 0;
$post_verify = true;
|
$logged_out = false;
$fail_check = 0;
$post_verify = true;
|
| |
foreach(array('action', 'do', 'module') as $input)
{
if(!isset($mybb->input[$input]))
{
$mybb->input[$input] = '';
}
}
|
if($mybb->input['action'] == "unlock")
{
|
if($mybb->input['action'] == "unlock")
{
|
| Zeile 151 | Zeile 159 |
|---|
"ip" => $db->escape_string(get_ip()),
"dateline" => TIME_NOW,
"lastactive" => TIME_NOW,
|
"ip" => $db->escape_string(get_ip()),
"dateline" => TIME_NOW,
"lastactive" => TIME_NOW,
|
"data" => "",
| "data" => serialize(array()),
|
);
$db->insert_query("adminsessions", $admin_session);
|
);
$db->insert_query("adminsessions", $admin_session);
|
| | $admin_session['data'] = array();
|
$db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
my_setcookie("adminsid", $sid);
my_setcookie('acploginattempts', 0);
| $db->update_query("adminoptions", array("loginattempts" => 0, "loginlockoutexpiry" => 0), "uid='".intval($mybb->user['uid'])."'", 1);
my_setcookie("adminsid", $sid);
my_setcookie('acploginattempts', 0);
|
| Zeile 164 | Zeile 173 |
|---|
if(!empty($mybb->input['module']))
{
// $query_string should contain the module
|
if(!empty($mybb->input['module']))
{
// $query_string should contain the module
|
$query_string = '?module='.htmlspecialchars($mybb->input['module']);
| $query_string = '?module='.htmlspecialchars_uni($mybb->input['module']);
|
// Now we look for any paramters passed in $_SERVER['QUERY_STRING']
if($_SERVER['QUERY_STRING'])
|
// Now we look for any paramters passed in $_SERVER['QUERY_STRING']
if($_SERVER['QUERY_STRING'])
|
| Zeile 188 | Zeile 197 |
|---|
{
$params = explode("=", $param);
|
{
$params = explode("=", $param);
|
$query_string .= '&'.htmlspecialchars($params[0])."=".htmlspecialchars($params[1]);
| $query_string .= '&'.htmlspecialchars_uni($params[0])."=".htmlspecialchars_uni($params[1]);
|
}
}
| }
}
|
| Zeile 255 | Zeile 264 |
|---|
// No matching admin session found - show message on login screen
if(!$admin_session['sid'])
{
|
// No matching admin session found - show message on login screen
if(!$admin_session['sid'])
{
|
$login_message = $lang->invalid_admin_session;
| $login_message = $lang->error_invalid_admin_session;
|
}
else
{
| }
else
{
|
| Zeile 269 | Zeile 278 |
|---|
if(!$mybb->user['uid'] || $mybb->user['loginkey'] != $admin_session['loginkey'])
{
unset($mybb->user);
|
if(!$mybb->user['uid'] || $mybb->user['loginkey'] != $admin_session['loginkey'])
{
unset($mybb->user);
|
}
| }
|
else
{
// Admin CP sessions 2 hours old are expired
| else
{
// Admin CP sessions 2 hours old are expired
|
| Zeile 316 | Zeile 325 |
|---|
if(verify_post_check($mybb->input['my_post_key']))
{
$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
|
if(verify_post_check($mybb->input['my_post_key']))
{
$db->delete_query("adminsessions", "sid='".$db->escape_string($mybb->cookies['adminsid'])."'");
|
my_setcookie("adminsid", "");
| my_unsetcookie('adminsid');
|
$logged_out = true;
}
}
|
$logged_out = true;
}
}
|
if(!$mybb->user['usergroup'])
| if(!isset($mybb->user['usergroup']))
|
{
$mybbgroups = 1;
}
| {
$mybbgroups = 1;
}
|
| Zeile 333 | Zeile 342 |
|---|
if($mybb->usergroup['cancp'] != 1 || !$mybb->user['uid'])
{
|
if($mybb->usergroup['cancp'] != 1 || !$mybb->user['uid'])
{
|
$db->delete_query("adminsessions", "uid='".intval($mybb->user['uid'])."'");
| $uid = 0;
if(isset($mybb->user['uid']))
{
$uid = intval($mybb->user['uid']);
}
$db->delete_query("adminsessions", "uid = '{$uid}'");
|
unset($mybb->user);
|
unset($mybb->user);
|
my_setcookie("adminsid", "");
| my_unsetcookie('adminsid');
|
}
if($mybb->user['uid'])
| }
if($mybb->user['uid'])
|
| Zeile 345 | Zeile 359 |
|---|
if(!empty($admin_options['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/{$admin_options['cpstyle']}/main.css"))
{
|
if(!empty($admin_options['cpstyle']) && file_exists(MYBB_ADMIN_DIR."/styles/{$admin_options['cpstyle']}/main.css"))
{
|
$page->style = $cp_style = $admin_options['cpstyle'];
| $cp_style = $admin_options['cpstyle'];
|
}
// Update the session information in the DB
| }
// Update the session information in the DB
|
| Zeile 386 | Zeile 400 |
|---|
$page->style = $cp_style;
// Do not have a valid Admin user, throw back to login page.
|
$page->style = $cp_style;
// Do not have a valid Admin user, throw back to login page.
|
if(!$mybb->user['uid'] || $logged_out == true)
| if(!isset($mybb->user['uid']) || $logged_out == true)
|
{
if($logged_out == true)
{
| {
if($logged_out == true)
{
|
| Zeile 399 | Zeile 413 |
|---|
else
{
// If we have this error while retreiving it from an AJAX request, then send back a nice error
|
else
{
// If we have this error while retreiving it from an AJAX request, then send back a nice error
|
if($mybb->input['ajax'] == 1)
| if(isset($mybb->input['ajax']) && $mybb->input['ajax'] == 1)
|
{
echo "<error>login</error>";
die;
| {
echo "<error>login</error>";
die;
|
| Zeile 411 | Zeile 425 |
|---|
$page->add_breadcrumb_item($lang->home, "index.php");
// Begin dealing with the modules
|
$page->add_breadcrumb_item($lang->home, "index.php");
// Begin dealing with the modules
|
| | $is_super_admin = is_super_admin($mybb->user['uid']);
|
$modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)
| $modules_dir = MYBB_ADMIN_DIR."modules";
$dir = opendir($modules_dir);
while(($module = readdir($dir)) !== false)
|
| Zeile 425 | Zeile 441 |
|---|
$has_permission = false;
if(function_exists($module."_admin_permissions"))
{
|
$has_permission = false;
if(function_exists($module."_admin_permissions"))
{
|
if(isset($mybb->admin['permissions'][$module]))
| if(isset($mybb->admin['permissions'][$module]) || $is_super_admin == true)
|
{
$has_permission = true;
}
| {
$has_permission = true;
}
|
| Zeile 464 | Zeile 480 |
|---|
else
{
$current_module = explode("-", $mybb->input['module'], 2);
|
else
{
$current_module = explode("-", $mybb->input['module'], 2);
|
| | }
if(!isset($current_module[1]))
{
$current_module[1] = 'home';
|
}
if($mybb->input['module'] && isset($modules[$current_module[0]]))
| }
if($mybb->input['module'] && isset($modules[$current_module[0]]))
|