0byt3m1n1

Path: /data/applications/aps/geeklog/1.8.0-0/standard/htdocs/plugins/spamx/ [ Home ]
File: EditHeader.Admin.class.php
<?php

/**
* File: EditHeader.Admin.class.php
* This is the Edit HTTP Header Module for the Geeklog Spam-X plugin
*
* Copyright (C) 2005-2009 by the following authors:
* Author    Dirk Haun <dirk AT haun-online DOT de>
*
* based on the works of Tom Willett <tomw AT pigstye DOT net>
*
* Licensed under GNU General Public License
*
* @package Spam-X
* @subpackage Modules
*/

if (strpos(strtolower($_SERVER['PHP_SELF']), 'editheader.admin.class.php') !== false) {
    die('This file can not be used on its own!');
}

/**
* Include Abstract Base Class
*/
require_once $_CONF['path'] . 'plugins/spamx/BaseAdmin.class.php';

/**
* HTTP Header Editor
*
* @package Spam-X
*
*/
class EditHeader extends BaseAdmin {
    /**
     * Constructor
     */
    function display()
    {
        global $_CONF, $_TABLES, $LANG_SX00;

        $action = '';
        if (isset($_GET['action'])) {
            $action = $_GET['action'];
        } elseif (isset($_POST['paction'])) {
            $action = $_POST['paction'];
        }

        if (($action == 'delete') && SEC_checkToken()) {
            $entry = $_GET['entry'];
            if (!empty($entry)) {
                $dbentry = addslashes($entry);
                DB_delete($_TABLES['spamx'], array('name', 'value'),
                                             array('HTTPHeader', $dbentry));
            }
        } elseif (($action == $LANG_SX00['addentry']) && SEC_checkToken()) {
            $entry = '';
            $name = COM_applyFilter($_REQUEST['header-name']);
            $n = explode(':', $name);
            $name = $n[0];
            $value = $_REQUEST['header-value'];

            if (!empty($name) && !empty($value)) {
                $entry = $name . ': ' . $value;
            }

            $dbentry = addslashes($entry);
            if (!empty($entry)) {
                $result = DB_query("INSERT INTO {$_TABLES['spamx']} VALUES ('HTTPHeader','$dbentry')");
            }
        }

        $token = SEC_createToken();
        $display = '<hr' . XHTML . '>' . LB . '<p><b>';
        $display .= $LANG_SX00['headerblack'];
        $display .= '</b></p>' . LB . '<ul>' . LB;
        $result = DB_query("SELECT value FROM {$_TABLES['spamx']} WHERE name='HTTPHeader' ORDER BY value");
        $nrows = DB_numRows($result);
        for ($i = 0; $i < $nrows; $i++) {
            list($e) = DB_fetchArray($result);

            $display .= '<li>'. COM_createLink(htmlspecialchars($e),
                $_CONF['site_admin_url']
                . '/plugins/spamx/index.php?command=EditHeader&amp;action=delete&amp;entry=' . urlencode($e) . '&amp;' . CSRF_TOKEN . '=' . $token) . '</li>' . LB;
        }
        $display .= '</ul>' . LB . '<p>' . $LANG_SX00['e1'] . '</p>' . LB;
        $display .= '<p>' . $LANG_SX00['e2'] . '</p>' . LB;

        $display .= '<form method="post" action="' . $_CONF['site_admin_url']
                 . '/plugins/spamx/index.php?command=EditHeader">' . LB;
        $display .= '<table border="0" width="100%">' . LB;
        $display .= '<tr><td align="right"><b>Header:</b></td>' . LB;
        $display .= '<td><input type="text" size="40" name="header-name"'
                 . XHTML . '> e.g. <tt>User-Agent</tt></td></tr>' . LB;
        $display .= '<tr><td align="right"><b>Content:</b></td>' . LB;
        $display .= '<td><input type="text" size="40" name="header-value"'
                 . XHTML . '> e.g. <tt>Mozilla</tt></td></tr>' . LB;
        $display .= '</table>' . LB;
        $display .= '<p><input type="submit" name="paction" value="'
                 . $LANG_SX00['addentry'] . '"' . XHTML . '>';
        $display .= '<input type="hidden" name="' . CSRF_TOKEN
                 . "\" value=\"{$token}\"" . XHTML . '></p>' . LB;
        $display .= '</form>' . LB;

        return $display;
    }

    function link()
    {
        return "Edit HTTP Header Blacklist";
    }
}

?>