Changeset 7730 for trunk/phpgwapi/inc/class.http.inc.php

Timestamp:

01/11/13 08:48:41 (11 years ago)

Author:

marcieli

Message:

Ticket #3236 - Correcoes de seguranca com base no segundo relatorio emitido.

File:

• trunk/phpgwapi/inc/class.http.inc.php (modified) (3 diffs)

trunk/phpgwapi/inc/class.http.inc.php

@@ -291 +291 @@
                                         $headers['Content-length'] = $body_length;
                                 }
-                                for($host_set=0,Reset($headers),$header=0;$header<count($headers);Next($headers),$header++)
+                $headers_count = count($headers);
+                                for($host_set=0,Reset($headers),$header=0;$header<$headers_count;Next($headers),$header++)
                                 {
                                         $header_name  = Key($headers);
@@ -338 +339 @@
                                                                 ($match == 0 || $domain_pattern[0] == '.' || $this->request_host[$match-1] == '.'))
                                                         {
-                                $cookies_count = count($this->cookies[0][$domain_pattern]);
-                                                                for(Reset($this->cookies[0][$domain_pattern]),$path_part=0;$path_part<$cookies_count;Next($this->cookies[0][$domain_pattern]),$path_part++)
+                                $cookies_count_domain_pattern = count($this->cookies[0][$domain_pattern]);
+                                                                for(Reset($this->cookies[0][$domain_pattern]),$path_part=0;$path_part<$cookies_count_domain_pattern;Next($this->cookies[0][$domain_pattern]),$path_part++)
                                                                 {
                                                                         $path = Key($this->cookies[0][$domain_pattern]);
                                                                         if(strlen($this->request_uri) >= strlen($path) && substr($this->request_uri,0,strlen($path)) == $path)
                                                                         {
-                                        $cookies_count = count($this->cookies[0][$domain_pattern][$path]);
-                                                                                for(Reset($this->cookies[0][$domain_pattern][$path]),$cookie = 0;$cookie<$cookies_count;Next($this->cookies[0][$domain_pattern][$path]),$cookie++)
+                                        $cookies_count_path = count($this->cookies[0][$domain_pattern][$path]);
+                                                                                for(Reset($this->cookies[0][$domain_pattern][$path]),$cookie = 0;$cookie<$cookies_count_path;Next($this->cookies[0][$domain_pattern][$path]),$cookie++)
                                                                                 {
                                                                                         $cookie_name = Key($this->cookies[0][$domain_pattern][$path]);
@@ -528 +529 @@
                         $now = gmdate('Y-m-d H-i-s');
                         $cookies = array();
-                        for($secure_cookies = 0,Reset($this->cookies);$secure_cookies<count($this->cookies);Next($this->cookies),$secure_cookies++)
+            $cookies_count = count($this->cookies);
+                        for($secure_cookies = 0,Reset($this->cookies);$secure_cookies<$cookies_count;Next($this->cookies),$secure_cookies++)
                         {
                                 $secure = Key($this->cookies);
-                $cookies_count = count($this->cookies[$secure]);
-                                for($domain = 0,Reset($this->cookies[$secure]);$domain<$cookies_count;Next($this->cookies[$secure]),$domain++)
+                $cookies_count_secure = count($this->cookies[$secure]);
+                                for($domain = 0,Reset($this->cookies[$secure]);$domain<$cookies_count_secure;Next($this->cookies[$secure]),$domain++)
                                 {
                                         $domain_pattern = Key($this->cookies[$secure]);
-                    $cookies_count = count($this->cookies[$secure][$domain_pattern]);
-                                        for(Reset($this->cookies[$secure][$domain_pattern]),$path_part=0;$path_part<$cookies_count;Next($this->cookies[$secure][$domain_pattern]),$path_part++)
+                    $cookies_count_domain_pattern = count($this->cookies[$secure][$domain_pattern]);
+                                        for(Reset($this->cookies[$secure][$domain_pattern]),$path_part=0;$path_part<$cookies_count_domain_pattern;Next($this->cookies[$secure][$domain_pattern]),$path_part++)
                                         {
                                                 $path=Key($this->cookies[$secure][$domain_pattern]);
-                        $cookies_count = count($this->cookies[$secure][$domain_pattern][$path]);
-                                                for(Reset($this->cookies[$secure][$domain_pattern][$path]),$cookie=0;$cookie<$cookies_count;Next($this->cookies[$secure][$domain_pattern][$path]),$cookie++)
+                        $cookies_count_path = count($this->cookies[$secure][$domain_pattern][$path]);
+                                                for(Reset($this->cookies[$secure][$domain_pattern][$path]),$cookie=0;$cookie<$cookies_count_path;Next($this->cookies[$secure][$domain_pattern][$path]),$cookie++)
                                                 {
                                                         $cookie_name = Key($this->cookies[$secure][$domain_pattern][$path]);