[mxbb-commits] core/modules/mx_textblocks mx_textblock_blog.php, 1.12, 1.13

[Jon O. <jon...@us...>]

Update of /cvsroot/mxbb/core/modules/mx_textblocks
In directory sc8-pr-cvs7.sourceforge.net:/tmp/cvs-serv4108/modules/mx_textblocks

Modified Files:
	mx_textblock_blog.php 
Log Message:
security

Index: mx_textblock_blog.php
===================================================================
RCS file: /cvsroot/mxbb/core/modules/mx_textblocks/mx_textblock_blog.php,v
retrieving revision 1.12
retrieving revision 1.13
diff -C2 -d -r1.12 -r1.13
*** mx_textblock_blog.php	5 Apr 2006 21:07:17 -0000	1.12
--- mx_textblock_blog.php	17 Jun 2006 20:45:22 -0000	1.13
***************
*** 4,20 ****
  * @package mxBB Portal Module - mx_textblocks
  * @version $Id$
! * @copyright (c) 2002-2006 [Jon Ohlsson] mxBB Project Team 
  * @license http://opensource.org/licenses/gpl-license.php GNU General Public License v2
  *
  */
!  
  // NOTE: This script is NOT updated for mxBB 2.8
!  
! if( !defined('IN_PORTAL') )
  {
  	die("Hacking attempt");
  }
  
- 
  if( isset($HTTP_POST_VARS['u']) || isset($HTTP_GET_VARS['u']) )
  {
--- 4,19 ----
  * @package mxBB Portal Module - mx_textblocks
  * @version $Id$
! * @copyright (c) 2002-2006 [Jon Ohlsson] mxBB Project Team
  * @license http://opensource.org/licenses/gpl-license.php GNU General Public License v2
  *
  */
! 
  // NOTE: This script is NOT updated for mxBB 2.8
! 
! if( !defined('IN_PORTAL') || !is_object($mx_block))
  {
  	die("Hacking attempt");
  }
  
  if( isset($HTTP_POST_VARS['u']) || isset($HTTP_GET_VARS['u']) )
  {
***************
*** 136,140 ****
  if( !empty($blog_id) && $userdata['session_logged_in'] && $blog_mode == 'user' )
  {
! 	$template->assign_block_vars('switch_blog_id', array( 
  		'BLOG_ID' => sprintf($blog_id, $userdata['username'])
  	));
--- 135,139 ----
  if( !empty($blog_id) && $userdata['session_logged_in'] && $blog_mode == 'user' )
  {
! 	$template->assign_block_vars('switch_blog_id', array(
  		'BLOG_ID' => sprintf($blog_id, $userdata['username'])
  	));
***************
*** 152,156 ****
  	'L_TOC' => $lang['Toc_title'],
  	'L_GOTO_PAGE' => $lang['Goto_page']
! )); 
  
  //
--- 151,155 ----
  	'L_TOC' => $lang['Toc_title'],
  	'L_GOTO_PAGE' => $lang['Goto_page']
! ));
  
  //
***************
*** 198,202 ****
  		{
  			$article_toc = str_replace('\"', '"', substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "preg_replace(\$orig_word, \$replacement_word, '\\0')", '>' . $article_toc . '<'), 1, -1));
! 		} 
  		// Replace newlines (we use this rather than nl2br because
  		// till recently it wasn't XHTML compliant)
--- 197,201 ----
  		{
  			$article_toc = str_replace('\"', '"', substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "preg_replace(\$orig_word, \$replacement_word, '\\0')", '>' . $article_toc . '<'), 1, -1));
! 		}
  		// Replace newlines (we use this rather than nl2br because
  		// till recently it wasn't XHTML compliant)