0byt3m1n1

Path: /data/applications/aps/tikiwiki/14.1-0/standard/htdocs/lib/ [ Home ]
File: tikiticketlib.php
<?php
// (c) Copyright 2002-2015 by authors of the Tiki Wiki CMS Groupware Project
//
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id: tikiticketlib.php 55238 2015-04-27 04:55:58Z lindonb $

/*
	 Tikiwiki CSRF protection.
	 also called Sea-Surfing

	 please report to security@tikiwiki.org
	 if you find a better way to handle sea surfing nastiness
 */

//this script may only be included - so its better to die if called directly.
if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) !== false) {
	header('location: index.php');
	exit;
}

// Deprecated in favor of key_get($area)
function ask_ticket($area)
{
	$_SESSION['antisurf'] = $area;
	return true;
}

// Deprecated in favor of key_check($area)
function check_ticket($area)
{
	if (!isset($_SESSION['antisurf'])) {
		$_SESSION['antisurf'] = '';
	}
	if ($_SESSION['antisurf'] != $area) {
		global $prefs;
		$_SESSION['antisurf'] = $area;
		if ($prefs['feature_ticketlib'] == 'y') {
			$smarty = TikiLib::lib('smarty');
			$smarty->assign('post', $_POST);
			$smarty->assign('query', $_SERVER['QUERY_STRING']);
			$smarty->assign('self', $_SERVER['PHP_SELF']);
			$smarty->assign('msg', tra('Sea Surfing (CSRF) detected. Operation blocked.'));
			$smarty->display('error_ticket.tpl');
			die;
		}
	}

	return true;
}

// new valid functions for ticketing:
// * @param string $area is not used any longer
function key_get($area = null, $confirmation_text = '', $confirmaction = '',  $returnHtml = true)
{
	global $prefs;
	if ($prefs['feature_ticketlib2'] == 'y' || $returnHtml === false) {
		$ticket = md5(uniqid(rand()));
		$_SESSION['tickets'][$ticket] = time();
		if ($returnHtml) {
			$smarty = TikiLib::lib('smarty');
			$smarty->assign('ticket', $ticket);
			if (empty($confirmation_text)) {
				$confirmation_text = tra('Click here to confirm your action');
			}

			if (empty($confirmaction)) {
				$confirmaction = $_SERVER['PHP_SELF'];
			}

			// Display the confirmation in the main tiki.tpl template
			$smarty->assign('post', $_POST);
			$smarty->assign('dblclickedit', 'n');
			$smarty->assign('print_page', 'n');
			$smarty->assign('confirmation_text', $confirmation_text);
			$smarty->assign('confirmaction', $confirmaction);
			$smarty->assign('mid', 'confirm.tpl');
			$smarty->display('tiki.tpl');
			die();
		} else {
			return ['ticket' => $ticket];
		}
	}
}
// * @param string $area is not used any longer
function key_check($area = null, $returnHtml = true)
{
	global $prefs, $jitRequest;
	if ($prefs['feature_ticketlib2'] == 'y' || $returnHtml === false) {
		if (isset($_REQUEST['ticket'])) {
			$ticket = $_REQUEST['ticket'];
		} elseif (isset($jitRequest['ticket'])) {
			$ticket = $jitRequest->ticket->alnum();
		}
		if (isset($ticket) && isset($_SESSION['tickets'][$ticket])) {
			$time = $_SESSION['tickets'][$ticket];
			if ($time < time() && $time > (time()-(60*15))) {
				return true;
			}
		}
		if ($returnHtml) {
			$smarty = TikiLib::lib('smarty');
			$smarty->assign('msg', tra('Sea Surfing (CSRF) detected. Operation blocked.'));
			$smarty->display('error.tpl');
			exit();
		} else {
			return false;
		}
	}
}