gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2024-10-04 15:12:30 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

- prevent XSS attacs

Browse Source
This commit is contained in:
steinm 2012-08-28 07:18:00 +00:00
parent 4bb7c9307f
commit 75c2adcfc6
24 changed files with 90 additions and 90 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
out/out.FolderNotify.php
View File

@ -28,7 +28,7 @@ include("../inc/inc.Authentication.php");
if (!isset($_GET["folderid"]) || !is_numeric($_GET["folderid"]) || intval($_GET["folderid"])<1) {
UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_folder_id"))),getMLText("invalid_folder_id"));
}
$folderid = $_GET["folderid"];
$folderid = intval($_GET["folderid"]);
$folder = $dms->getFolder($folderid);
if (!is_object($folder)) {

2
out/out.KeywordChooser.php
View File

@ -34,7 +34,7 @@ foreach($allusers as $u) {
$categories = $dms->getAllKeywordCategories($userids);
if($_GET['target']) {
$target = $_GET['target'];
$target = sanitizeString($_GET['target']);
} else {
$target = 'form1';
}

2
out/out.LogManagement.php
View File

@ -90,7 +90,7 @@ if ($logname && file_exists($settings->_contentDir.$logname)){
UI::contentHeading("&nbsp;");
UI::contentContainerStart();
UI::contentSubHeading($logname);
UI::contentSubHeading(sanitizeString($logname));
echo "<div class=\"logview\">";
echo "<pre>\n";

2
out/out.MoveDocument.php
View File

@ -28,7 +28,7 @@ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.MoveFolder.php
View File

@ -29,7 +29,7 @@ if (!isset($_GET["folderid"]) || !is_numeric($_GET["folderid"]) || intval($_GET[
UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_folder_id"))),getMLText("invalid_folder_id"));
}
$folderid = $_GET["folderid"];
$folderid = intval($_GET["folderid"]);
$folder = $dms->getFolder($folderid);
if (!is_object($folder)) {

2
out/out.OverrideContentStatus.php
View File

@ -29,7 +29,7 @@ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

4
out/out.RemoveArchive.php
View File

@ -40,8 +40,8 @@ UI::contentContainerStart();
?>
<form action="../op/op.RemoveArchive.php" name="form1" method="POST">
<input type="Hidden" name="arkname" value="<?php echo $arkname?>">
<p><?php printMLText("confirm_rm_backup", array ("arkname" => $arkname));?></p>
<input type="Hidden" name="arkname" value="<?php echo sanitizeString($arkname); ?>">
<p><?php printMLText("confirm_rm_backup", array ("arkname" => sanitizeString($arkname)));?></p>
<input type="Submit" value="<?php printMLText("backup_remove");?>">
</form>
<?php

2
out/out.RemoveDocument.php
View File

@ -28,7 +28,7 @@ include("../inc/inc.Authentication.php");
if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) {
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.RemoveDocumentFile.php
View File

@ -27,7 +27,7 @@ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

4
out/out.RemoveDump.php
View File

@ -40,8 +40,8 @@ UI::contentContainerStart();
?>
<form action="../op/op.RemoveDump.php" name="form1" method="POST">
<input type="Hidden" name="dumpname" value="<?php echo $dumpname?>">
<p><?php printMLText("confirm_rm_dump", array ("dumpname" => $dumpname));?></p>
<input type="Hidden" name="dumpname" value="<?php echo sanitizeString($dumpname); ?>">
<p><?php printMLText("confirm_rm_dump", array ("dumpname" => sanitizeString($dumpname)));?></p>
<input type="Submit" value="<?php printMLText("dump_remove");?>">
</form>
<?php

2
out/out.RemoveEvent.php
View File

@ -45,7 +45,7 @@ UI::contentContainerStart();
?>
<form action="../op/op.RemoveEvent.php" name="form1" method="POST">
<input type="Hidden" name="eventid" value="<?php echo $_GET["id"]; ?>">
<input type="Hidden" name="eventid" value="<?php echo intval($_GET["id"]); ?>">
<p><?php printMLText("confirm_rm_event", array ("name" => htmlspecialchars($event["name"])));?></p>
<input type="Submit" value="<?php printMLText("delete");?>">
</form>

2
out/out.RemoveFolderFiles.php
View File

@ -30,7 +30,7 @@ if (!isset($_GET["targetidform3"]) || !is_numeric($_GET["targetidform3"]) || int
UI::exitError(getMLText("admin_tools"),getMLText("invalid_folder_id"));
}
$folderid = $_GET["targetidform3"];
$folderid = intval($_GET["targetidform3"]);
$folder = $dms->getFolder($folderid);
if (!is_object($folder)) {

2
out/out.RemoveGroup.php
View File

@ -31,7 +31,7 @@ if (!$user->isAdmin()) {
if (!isset($_GET["groupid"]) || !is_numeric($_GET["groupid"]) || intval($_GET["groupid"])<1) {
UI::exitError(getMLText("rm_group"),getMLText("invalid_user_id"));
}
$groupid = $_GET["groupid"];
$groupid = intval($_GET["groupid"]);
$currGroup = $dms->getGroup($groupid);
if (!is_object($currGroup)) {

2
out/out.RemoveLog.php
View File

@ -30,7 +30,7 @@ if (!isset($_GET["logname"]) || !file_exists($settings->_contentDir.$_GET["logna
UI::exitError(getMLText("admin_tools"),getMLText("unknown_id"));
}
$logname = $_GET["logname"];
$logname = sanitizeString($_GET["logname"]);
UI::htmlStartPage(getMLText("backup_tools"));
UI::globalNavigation();

124
out/out.RemoveUser.php
View File

@ -1,82 +1,82 @@
<?php
// MyDMS. Document Management System
// Copyright (C) 2002-2005 Markus Westphal
// Copyright (C) 2006-2008 Malcolm Cowe
// Copyright (C) 2006-2008 Malcolm Cowe
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
include("../inc/inc.Settings.php");
<?php
// MyDMS. Document Management System
// Copyright (C) 2002-2005 Markus Westphal
// Copyright (C) 2006-2008 Malcolm Cowe
// Copyright (C) 2010-2012 Uwe Steinmann
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 2 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
include("../inc/inc.Settings.php");
include("../inc/inc.DBInit.php");
include("../inc/inc.Language.php");
include("../inc/inc.ClassUI.php");
include("../inc/inc.Language.php");
include("../inc/inc.ClassUI.php");
include("../inc/inc.Authentication.php");
if (!$user->isAdmin()) {
UI::exitError(getMLText("admin_tools"),getMLText("access_denied"));
}
if (!isset($_GET["userid"]) || !is_numeric($_GET["userid"]) || intval($_GET["userid"])<1) {
UI::exitError(getMLText("rm_user"),getMLText("invalid_user_id"));
}
UI::exitError(getMLText("admin_tools"),getMLText("access_denied"));
}
$userid = $_GET["userid"];
if (!isset($_GET["userid"]) || !is_numeric($_GET["userid"]) || intval($_GET["userid"])<1) {
UI::exitError(getMLText("rm_user"),getMLText("invalid_user_id"));
}
$userid = intval($_GET["userid"]);
$currUser = $dms->getUser($userid);
if ($userid==$user->getID()) {
UI::exitError(getMLText("rm_user"),getMLText("access_denied"));
if ($userid==$user->getID()) {
UI::exitError(getMLText("rm_user"),getMLText("access_denied"));
}
if (!is_object($currUser)) {
UI::exitError(getMLText("rm_user"),getMLText("invalid_user_id"));
}
UI::htmlStartPage(getMLText("admin_tools"));
UI::globalNavigation();
if (!is_object($currUser)) {
UI::exitError(getMLText("rm_user"),getMLText("invalid_user_id"));
}
UI::htmlStartPage(getMLText("admin_tools"));
UI::globalNavigation();
UI::pageNavigation(getMLText("admin_tools"), "admin_tools");
UI::contentHeading(getMLText("rm_user"));
UI::contentHeading(getMLText("rm_user"));
UI::contentContainerStart();
?>
<form action="../op/op.UsrMgr.php" name="form1" method="POST">
<input type="Hidden" name="userid" value="<?php print $userid;?>">
<input type="Hidden" name="action" value="removeuser">
<p>
<?php printMLText("confirm_rm_user", array ("username" => htmlspecialchars($currUser->getFullName())));?>
</p>
?>
<form action="../op/op.UsrMgr.php" name="form1" method="POST">
<input type="Hidden" name="userid" value="<?php print $userid;?>">
<input type="Hidden" name="action" value="removeuser">
<p>
<?php printMLText("confirm_rm_user", array ("username" => htmlspecialchars($currUser->getFullName())));?>
</p>
<p>
<?php printMLText("assign_user_property_to"); ?> :
<select name="assignTo">
<select name="assignTo">
<?php
$users = $dms->getAllUsers();
foreach ($users as $currUser) {
if ($currUser->isGuest() || ($currUser->getID() == $userid) )
foreach ($users as $currUser) {
if ($currUser->isGuest() || ($currUser->getID() == $userid) )
continue;
if (isset($_GET["userid"]) && $currUser->getID()==$_GET["userid"]) $selected=$count;
print "<option value=\"".$currUser->getID()."\">" . htmlspecialchars($currUser->getLogin());
}
?>
if (isset($_GET["userid"]) && $currUser->getID()==$_GET["userid"]) $selected=$count;
print "<option value=\"".$currUser->getID()."\">" . htmlspecialchars($currUser->getLogin()." - ".$currUser->getFullName());
}
?>
</select>
</p>
<p><input type="Submit" value="<?php printMLText("rm_user");?>"></p>
</form>
<?php
UI::contentContainerEnd();
UI::htmlEndPage();
?>
<p><input type="Submit" value="<?php printMLText("rm_user");?>"></p>
</form>
<?php
UI::contentContainerEnd();
UI::htmlEndPage();
?>

2
out/out.RemoveVersion.php
View File

@ -29,7 +29,7 @@ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.ReviewDocument.php
View File

@ -29,7 +29,7 @@ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.SetExpires.php
View File

@ -28,7 +28,7 @@ include("../inc/inc.Authentication.php");
if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) {
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.SetReviewersApprovers.php
View File

@ -28,7 +28,7 @@ include("../inc/inc.Authentication.php");
if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) {
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.UpdateDocument.php
View File

@ -28,7 +28,7 @@ include("../inc/inc.Authentication.php");
if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) {
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

2
out/out.UpdateDocument2.php
View File

@ -33,7 +33,7 @@ if(!$settings->_enableLargeFileUpload) {
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("access_denied"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {

4
out/out.ViewDocument.php
View File

@ -40,7 +40,7 @@ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_GET["documentid"];
$documentid = intval($_GET["documentid"]);
$document = $dms->getDocument($documentid);
if (!is_object($document)) {
@ -90,7 +90,7 @@ if ($document->isLocked()) {
<td>
<?php
$owner = $document->getOwner();
print "<a class=\"infos\" href=\"mailto:".$owner->getEmail()."\">".$owner->getFullName()."</a>";
print "<a class=\"infos\" href=\"mailto:".$owner->getEmail()."\">".htmlspecialchars($owner->getFullName())."</a>";
?>
</td>
</tr>

6
out/out.ViewEvent.php
View File

@ -27,7 +27,7 @@ if (!isset($_GET["id"])){
UI::exitError(getMLText("event_details"),getMLText("error_occured"));
}
$event=getEvent($_GET["id"]);
$event=getEvent(intval($_GET["id"]));
if (is_bool($event)&&!$event){
UI::exitError(getMLText("event_details"),getMLText("error_occured"));
@ -46,12 +46,12 @@ echo "<table>";
echo "<tr>";
echo "<td>".getMLText("name").": </td>";
echo "<td>".$event["name"]."</td>";
echo "<td>".htmlspecialchars($event["name"])."</td>";
echo "</tr>";
echo "<tr>";
echo "<td>".getMLText("comment").": </td>";
echo "<td>".$event["comment"]."</td>";
echo "<td>".htmlspecialchars($event["comment"])."</td>";
echo "</tr>";
echo "<tr>";

2
out/out.ViewFolder.php
View File

@ -29,7 +29,7 @@ if (!isset($_GET["folderid"]) || !is_numeric($_GET["folderid"]) || intval($_GET[
$folderid = $settings->_rootFolderID;
}
else {
$folderid = $_GET["folderid"];
$folderid = intval($_GET["folderid"]);
}
$folder = $dms->getFolder($folderid);