Changeset 1057


Ignore:
Timestamp:
06/29/09 09:29:13 (15 years ago)
Author:
amuller
Message:

Ticket #475 - #559 - Atualização de segurança e adição de tema

Location:
trunk
Files:
11 added
4 deleted
8 edited

Legend:

Unmodified
Added
Removed

  • trunk/expressoMail1_2/inc/class.imap_functions.inc.php

    r1040 r1057  
    10091009                } 
    10101010                // Malicious Code Remove 
    1011                 $dirtyCodePattern = "/(<([\w]+[\w0-9]*)([^>]*)on(mouse(move|over|down|up)|load|blur|change|click|dblclick|focus|key(down|up|press)|select)(\ *)=(\ *)[\"'][^>\"']*[\"']([^>]*)>)(.*)(<\/\\2>)?/misU"; 
     1011                $dirtyCodePattern = "/(<([\w]+[\w0-9]*)(.*)on(mouse(move|over|down|up)|load|blur|change|click|dblclick|focus|key(down|up|press)|select)([\n\ ]*)=([\n\ ]*)[\"'][^>\"']*[\"']([^>]*)>)(.*)(<\/\\2>)?/misU"; 
    10121012                preg_match_all($dirtyCodePattern,$body,$rest,PREG_PATTERN_ORDER); 
    10131013                foreach($rest[0] as $i => $val) 
    10141014                        if (!(preg_match("/javascript:window\.open\(\"\/index\.php\?menuaction=calendar\.uicalendar\.set_action\&cal_id=([^;'\"]+);?['\"]/i",$rest[1][$i]) && strtoupper($rest[4][$i]) == "CLICK" )) //Calendar events 
    1015                                 $body = str_replace($rest[1][$i],"<".$rest[2][$i].$rest[3][$i].$rest[7][$i].">",$body); 
     1015                        $body = str_replace($rest[1][$i],"<".$rest[2][$i].$rest[3][$i].$rest[7][$i].">",$body); 
    10161016 
    10171017                return  "<span>".$body; 

  • trunk/expressoMail1_2/index.php

    r1036 r1057  
    11<?php 
    2  
    3         /* Begin: Check config needed for expressoMail */ 
    4         /* Config need for expressoMail work */ 
    5         $php_ini['session.auto_start'] = '1'; 
    6         $php_ini['magic_quotes_gpc'] = ''; 
    7         $php_ini['magic_quotes_runtime'] = ''; 
    8         $php_ini['magic_quotes_sybase'] = ''; 
    9          
    10         /* Config from php.ini */ 
    11         $php_ini_configs = array("session.auto_start","magic_quotes_gpc","magic_quotes_runtime","magic_quotes_sybase"); 
    12         /* Checking */ 
    13         $error = false; 
    14         foreach($php_ini_configs as $config) 
    15         { 
    16                 if ( ($f_phpini=ini_get($config)) != $php_ini[$config]) 
    17                 { 
    18                         $error = true; 
    19                         echo "Erro: Config <font color=red>$config</font> from php.ini needs to be '" . $php_ini[$config] . "', but is set to '" . $f_phpini . "'.<br>"; 
    20                 } 
    21         } 
    22         if ($error) 
    23                 exit; 
    24         /* End: Check config needed for expressoMail */ 
    252                 
    263        $GLOBALS['phpgw_info']['flags'] = array( 

  • trunk/phpgwapi/inc/adodb/session/adodb-session.php

    r34 r1057  
    6969                session_id(md5(uniqid(rand(), true))); 
    7070                $ck = session_get_cookie_params(); 
    71                 setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure']); 
     71                setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure'],true); 
    7272                //@session_start(); 
    7373        } 
    … …  
    7979                session_id($old_id); 
    8080                if (empty($ck)) $ck = session_get_cookie_params(); 
    81                 setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure']); 
     81                setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure'],true); 
    8282                return false; 
    8383        } 

  • trunk/phpgwapi/inc/adodb/session/old/adodb-session.php

    r34 r1057  
    122122                session_id(md5(uniqid(rand(), true))); 
    123123                $ck = session_get_cookie_params(); 
    124                 setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure']); 
     124                setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure'],true); 
    125125                //@session_start(); 
    126126        } 
    … …  
    132132                session_id($old_id); 
    133133                if (empty($ck)) $ck = session_get_cookie_params(); 
    134                 setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure']); 
     134                setcookie(session_name(), session_id(), false, $ck['path'], $ck['domain'], $ck['secure'],true); 
    135135                return false; 
    136136        } 

  • trunk/phpgwapi/inc/class.sessions.inc.php

    r1036 r1057  
    468468                                $this->phpgw_set_cookiedomain(); 
    469469                        } 
    470                         setcookie($cookiename,$cookievalue,$cookietime,'/',$this->cookie_domain); 
     470                        setcookie($cookiename,$cookievalue,$cookietime,'/',$this->cookie_domain,null,true); 
    471471                } 
    472472 

  • trunk/phpgwapi/templates/azul/css/cataratas.css

    r1024 r1057  
    453453.toolbar 
    454454{ 
    455         background-image:url(../../../../phpgwapi/templates/default/images/fundo_topo_fozi.png); 
     455        background-image:url(../../../../phpgwapi/templates/default/images/fundo_topo_fozi.jpg); 
    456456        position:absolute; 
    457457} 
    … …  
    459459.logo_expresso 
    460460{ 
    461         background:url(../../../../phpgwapi/templates/default/images/logo_expresso_fozi.png) no-repeat; 
     461        background:url(../../../../phpgwapi/templates/default/images/logo_expresso_fozi.gif) no-repeat; 
    462462        width: 264px; 
    463463        height: 35px; 
    … …  
    470470.content-folders { 
    471471        padding: 0px 0px 0px 0px !important; 
    472         background: #a0b2cc url(../../../../phpgwapi/templates/default/images/folder_bg_fozi.png) no-repeat scroll center bottom !important; 
     472        background: #a0b2cc url(../../../../phpgwapi/templates/default/images/folder_bg_fozi.jpg) no-repeat scroll center bottom !important; 
    473473} 
    474474 

  • trunk/phpgwapi/templates/azul/css/rochas.css

    r1049 r1057  
    480480.content-folders { 
    481481        padding: 0px 0px 0px 0px !important; 
    482         background: #ddf4fe url(../../../../phpgwapi/templates/default/images/folder_bg_canyon.png) no-repeat scroll center bottom !important; 
     482        background: #ddf4fe url(../../../../phpgwapi/templates/default/images/folder_bg_canyon.jpg) no-repeat scroll center bottom !important; 
    483483} 
    484484.navbar_butOut 

  • trunk/phpgwapi/templates/azul/navbar.inc.php

    r963 r1057  
    7474                                        if ($GLOBALS['phpgw_info']['flags']['currentapp'] == $app) 
    7575                                        { 
    76                                                 $icon .= '<img id="'.$title.'_id" src="' . $app_data['icon'] . '" alt="' . $title . '" title="'. $title . '" border="0" width="35" height="35" nowrap="nowrap"/></a>'; 
     76                                                $icon .= '<img id="'.str_replace('_','',$app).'id" src="' . $app_data['icon'] . '" alt="' . $title . '" title="'. $title . '" border="0" width="35" height="35" nowrap="nowrap"/></a>'; 
    7777                                                $current_app = True; 
    7878                                        } 
    7979                                        else 
    80                                                 $icon .= '<img id="'.$title.'_id" src="' . $app_data['icon'] . '" alt="' . $title . '" title="'. $title . '" border="0" width="24" height="24" nowrap="nowrap"/></a>'; 
     80                                                $icon .= '<img id="'.str_replace('_','',$app).'id" src="' . $app_data['icon'] . '" alt="' . $title . '" title="'. $title . '" border="0" width="24" height="24" nowrap="nowrap"/></a>'; 
    8181 
    8282                                        // 020204 ndee 
Note: See TracChangeset for help on using the changeset viewer.