Update of /cvsroot/phpicalendar/phpicalendar
In directory ddv4jf1.ch3.sourceforge.com:/tmp/cvs-serv11617
Modified Files:
month.php preferences.php week.php
Log Message:
debug rrules; fix cookie injection vuln
Index: month.php
===================================================================
RCS file: /cvsroot/phpicalendar/phpicalendar/month.php,v
retrieving revision 1.142
retrieving revision 1.143
diff -C2 -d -r1.142 -r1.143
*** month.php 12 Dec 2008 06:22:58 -0000 1.142
--- month.php 13 Dec 2008 23:42:30 -0000 1.143
***************
*** 67,71 ****
'calendar_name' => $cal_displayname,
'display_date' => $display_date,
! 'rss_powered' => $phpiCal_config->rss_powered,
'default_path' => '',
'rss_available' => '',
--- 67,71 ----
'calendar_name' => $cal_displayname,
'display_date' => $display_date,
! 'rss_powered' => $rss_powered,
'default_path' => '',
'rss_available' => '',
Index: preferences.php
===================================================================
RCS file: /cvsroot/phpicalendar/phpicalendar/preferences.php,v
retrieving revision 1.62
retrieving revision 1.63
diff -C2 -d -r1.62 -r1.63
*** preferences.php 12 Dec 2008 06:37:29 -0000 1.62
--- preferences.php 13 Dec 2008 23:42:31 -0000 1.63
***************
*** 100,104 ****
// select for calendars
$calendar_select = display_ical_list(availableCalendars($username, $password, $ALL_CALENDARS_COMBINED),TRUE);
! $calendar_select .="<option value=\"$ALL_CALENDARS_COMBINED\">$all_cal_comb_lang</option>";
$calendar_select = str_replace("<option value=\"$cookie_calendar\">","<option value=\"$cookie_calendar\" selected='selected'>",$calendar_select);
// select for dayview
--- 100,104 ----
// select for calendars
$calendar_select = display_ical_list(availableCalendars($username, $password, $ALL_CALENDARS_COMBINED),TRUE);
! $calendar_select .="<option value=\"$phpiCal_config->ALL_CALENDARS_COMBINED\">$all_cal_comb_lang</option>";
$calendar_select = str_replace("<option value=\"$cookie_calendar\">","<option value=\"$cookie_calendar\" selected='selected'>",$calendar_select);
// select for dayview
***************
*** 194,197 ****
$page->output();
- print_r($_COOKIE[$cookie_name]);
?>
--- 194,196 ----
Index: week.php
===================================================================
RCS file: /cvsroot/phpicalendar/phpicalendar/week.php,v
retrieving revision 1.133
retrieving revision 1.134
diff -C2 -d -r1.133 -r1.134
*** week.php 12 Dec 2008 06:22:58 -0000 1.133
--- week.php 13 Dec 2008 23:42:31 -0000 1.134
***************
*** 67,74 ****
'current_view' => $current_view,
'sidebar_date' => $sidebar_date,
! 'rss_powered' => $phpiCal_config->rss_powered,
'rss_available' => '',
'rss_valid' => '',
! 'show_search' => $show_search,
'next_day' => $next_day,
'next_week' => $next_week,
--- 67,74 ----
'current_view' => $current_view,
'sidebar_date' => $sidebar_date,
! 'rss_powered' => $rss_powered,
'rss_available' => '',
'rss_valid' => '',
! 'show_search' => $phpiCal_config->show_search,
'next_day' => $next_day,
'next_week' => $next_week,
|