[mxbb-commits] core common.php,1.72,1.73

[OryNider <ory...@us...>]

Update of /cvsroot/mxbb/core
In directory sc8-pr-cvs16.sourceforge.net:/tmp/cvs-serv8066

Modified Files:
	common.php 
Log Message:
missing function

Index: common.php
===================================================================
RCS file: /cvsroot/mxbb/core/common.php,v
retrieving revision 1.72
retrieving revision 1.73
diff -C2 -d -r1.72 -r1.73
*** common.php	15 Jan 2008 17:09:49 -0000	1.72
--- common.php	18 Jan 2008 08:17:30 -0000	1.73
***************
*** 172,175 ****
--- 172,246 ----
  }
  
+ /*
+ * Remove variables created by register_globals from the global scope
+ * Thanks to Matt Kavanagh
+ */
+ function deregister_globals()
+ {
+ 	$not_unset = array(
+ 		'GLOBALS'	=> true,
+ 		'_GET'		=> true,
+ 		'_POST'		=> true,
+ 		'_COOKIE'	=> true,
+ 		'_REQUEST'	=> true,
+ 		'_SERVER'	=> true,
+ 		'_SESSION'	=> true,
+ 		'_ENV'		=> true,
+ 		'_FILES'	=> true,
+ 		'phpEx'		=> true,
+ 		'phpbb_root_path'	=> true
+ 	);
+ 
+ 	// Not only will array_merge and array_keys give a warning if
+ 	// a parameter is not an array, array_merge will actually fail.
+ 	// So we check if _SESSION has been initialised.
+ 	if (!isset($_SESSION) || !is_array($_SESSION))
+ 	{
+ 		$_SESSION = array();
+ 	}
+ 
+ 	// Merge all into one extremely huge array; unset this later
+ 	$input = array_merge(
+ 		array_keys($_GET),
+ 		array_keys($_POST),
+ 		array_keys($_COOKIE),
+ 		array_keys($_SERVER),
+ 		array_keys($_SESSION),
+ 		array_keys($_ENV),
+ 		array_keys($_FILES)
+ 	);
+ 
+ 	foreach ($input as $varname)
+ 	{
+ 		if (isset($not_unset[$varname]))
+ 		{
+ 			// Hacking attempt. No point in continuing unless it's a COOKIE
+ 			if ($varname !== 'GLOBALS' || isset($_GET['GLOBALS']) || isset($_POST['GLOBALS']) || isset($_SERVER['GLOBALS']) || isset($_SESSION['GLOBALS']) || isset($_ENV['GLOBALS']) || isset($_FILES['GLOBALS']))
+ 			{
+ 				exit;
+ 			}
+ 			else
+ 			{
+ 				$cookie = &$_COOKIE;
+ 				while (isset($cookie['GLOBALS']))
+ 				{
+ 					foreach ($cookie['GLOBALS'] as $registered_var => $value)
+ 					{
+ 						if (!isset($not_unset[$registered_var]))
+ 						{
+ 							unset($GLOBALS[$registered_var]);
+ 						}
+ 					}
+ 					$cookie = &$cookie['GLOBALS'];
+ 				}
+ 			}
+ 		}
+ 
+ 		unset($GLOBALS[$varname]);
+ 	}
+ 
+ 	unset($input);
+ } 
+ 
  // If we are on PHP >= 6.0.0 we do not need some code
  if (version_compare(PHP_VERSION, '6.0.0-dev', '>='))