Bugtrac list contains unread bugfix| Bugtrac list contains unread bugfix |
$copyright
~; print_header(); print_header_end(); my $http_header = qq~ ~; my %namespace = ( TITLE => $heading, HTMLOUTPUT => $html_output, HTTPHEADER => $http_header ); # display output display_output($templatefile,\%namespace); } exit; ############################################################# # function last_visit_stamp # Keeps track of the date and time of last visit ############################################################# sub last_visit_stamp { my ($r_in,$r_setup) = @_; $r_in->{$current_session_cookie} = get_cookie($current_session_cookie); unless ($r_in->{$current_session_cookie}) { my ($mmonth,$dd,$yy) = split(/\//,$r_in->{'date'}); my ($hh,$minute,$second) = split(/\:/,$r_in->{'localtime'}); my $time_stamp = compute_time($yy, $mmonth, $dd, $hh, $minute, $second); $time_stamp = url_encode($time_stamp); $r_in->{$time_stamp_cookie} = get_cookie($last_visit_cookie); unless ($r_in->{$time_stamp_cookie}) { $r_in->{$time_stamp_cookie} = $time_stamp; } else { send_cookie($time_stamp_cookie,$r_in->{$time_stamp_cookie},$r_setup->{'expires'},$domain); } send_cookie($last_visit_cookie,$time_stamp,$r_setup->{'expires'},$domain); send_cookie($current_session_cookie,$time_stamp,'',''); } else { $r_in->{$time_stamp_cookie} = get_cookie($time_stamp_cookie); } } #======================================================================# # get_session # # If session cookie exists, then it returns a hash reference # # to the user data. # #======================================================================# sub get_session { my $r_temp = {}; my $session = get_cookie($cookie_name); if ($session) { if (-e "$sessiondir/$session.session") { $r_temp = get_userdata("$sessiondir/$session.session"); # MOD.2001.08.08.01 # Also return session ID $r_temp->{'session'} = $session; } else { send_cookie($cookie_name,'','Thur, 31-Dec-98 12:00:00 GMT',''); $session = ''; } } return $r_temp; } ########################################################################### # function unsafe_request # Return 1 if the request doesn't seem to check out # All requests not in %safe_request hash must pass HTTP_REFERER test ########################################################################### sub unsafe_request { my $r_in = shift; # Define requests that are allowed to have # incorrect HTTP_REFERER # NOTE - for those functions that use javascript popup # menu, HTTP_REFERER is checked in each module my %safe_actions = ( 'show_thread' => 1, 'list' => 1, 'fully_threaded_list' => 1, 'lobby' => 1, 'upload_file' => 1, 'html_reference' => 1, 'read_count' => 1, 'choose_avatar' => 1, 'user_rating' => 1, 'topic_rating' => 1, 'search' => 1, 'icq' => 1, 'emoticon_table' => 1, 'test' => 1 ); # Restrict some actions to only occur # from within the forums unless ($safe_actions{$r_in->{'az'}}) { unless (check_referer()) { return 1; } else { return 0; } } # mod.2001.07.14.01 # Moved to function unsafe_request # Any action with 'admin' prefix is unsafe if ($r_in->{'az'} =~ /^admin/) { return 1; } # Next check and make sure certain requests are done thru POST Only my %post_requests = ( 'a_mesg' => 1, 'e_mesg' => 1, 'poll' => 1, 'pview' => 1, 'send_icq' => 1 ); if ($post_requests{$r_in->{'az'}}) { return 1 if (lc($ENV{'REQUEST_METHOD'}) ne 'post'); } return 0; } ############################################################## # Function check_referer # Return 1 if HTTP_REFERER checks out ############################################################## sub check_referer { if ($ENV{'HTTP_REFERER'} =~ /$cgiurl/i or $ENV{'HTTP_REFERER'} =~ /$mainurl/i) { return 1; } else { return 0; } }