Code
- Subs.php ➔ updateStats()
- Subs.php ➔ updateMemberData()
- Subs.php ➔ updateSettings()
- Subs.php ➔ constructPageIndex()
- Subs.php ➔ comma_format()
- Subs.php ➔ timeformat()
- Subs.php ➔ un_htmlspecialchars()
- Subs.php ➔ shorten_subject()
- Subs.php ➔ forum_time()
- Subs.php ➔ permute()
- Subs.php ➔ parse_bbc()
- Subs.php ➔ parsesmileys()
- Subs.php ➔ highlight_php_code()
- Subs.php ➔ redirectexit()
- Subs.php ➔ obExit()
- Subs.php ➔ url_image_size()
- Subs.php ➔ setupThemeContext()
- Subs.php ➔ setMemoryLimit()
- Subs.php ➔ memoryReturnBytes()
- Subs.php ➔ template_header()
- Subs.php ➔ theme_copyright()
- Subs.php ➔ template_footer()
- Subs.php ➔ template_javascript()
- Subs.php ➔ template_css()
- Subs.php ➔ custMinify()
- Subs.php ➔ getAttachmentFilename()
- Subs.php ➔ ip2range()
- Subs.php ➔ host_from_ip()
- Subs.php ➔ text2words()
- Subs.php ➔ create_button()
- Subs.php ➔ setupMenuContext()
- Subs.php ➔ smf_seed_generator()
- Subs.php ➔ call_integration_hook()
- Subs.php ➔ add_integration_function()
- Subs.php ➔ remove_integration_function()
- Subs.php ➔ call_helper()
- Subs.php ➔ load_file()
- Subs.php ➔ prepareLikesContext()
- Subs.php ➔ sanitizeMSCutPaste()
- Subs.php ➔ replaceEntities__callback()
- Subs.php ➔ fixchar__callback()
- Subs.php ➔ entity_fix__callback()
- Subs.php ➔ get_gravatar_url()
- Subs.php ➔ smf_list_timezones()
- Subs.php ➔ fix_tz_abbrev()
- Subs.php ➔ inet_ptod()
- Subs.php ➔ inet_dtop()
- Subs.php ➔ _safe_serialize()
- Subs.php ➔ safe_serialize()
- Subs.php ➔ _safe_unserialize()
- Subs.php ➔ safe_unserialize()
- Subs.php ➔ smf_chmod()
- Subs.php ➔ smf_json_decode()
- Subs.php ➔ isValidIP()
- Subs.php ➔ smf_serverResponse()
- Subs.php ➔ set_tld_regex()
- Subs.php ➔ build_regex()
- Subs.php ➔ ssl_cert_found()
- Subs.php ➔ https_redirect_active()
- Subs.php ➔ build_query_board()
- Subs.php ➔ httpsOn()

'location: ' . str_repla...', '%20', $setLocation)can contain request data and is used in response header context(s) leading to a potential security vulnerability.67 paths for user data to reach this point
$_GET,and$requestis assigned in proxy.php on line 98$_GET,and$requestis assignedin proxy.php on line 98
$requestis passed to redirectexit()in proxy.php on line 116
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$_POST['start_date']is passed through date_parse(), and$dis assigned in Sources/Calendar.php on line 356$_POST,and$_POST['start_date']is passed through date_parse(), and$dis assignedin Sources/Calendar.php on line 356
$monthis assignedin Sources/Calendar.php on line 358
$scripturl . '?action=calendar;month=' . $month . ';year=' . $year . ';day=' . $dayis passed to redirectexit()in Sources/Calendar.php on line 375
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$_POST['start_datetime']is passed through date_parse(), and$dis assigned in Sources/Calendar.php on line 363$_POST,and$_POST['start_datetime']is passed through date_parse(), and$dis assignedin Sources/Calendar.php on line 363
$monthis assignedin Sources/Calendar.php on line 365
$scripturl . '?action=calendar;month=' . $month . ';year=' . $year . ';day=' . $dayis passed to redirectexit()in Sources/Calendar.php on line 375
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$monthis assigned in Sources/Calendar.php on line 372$_POST,and$monthis assignedin Sources/Calendar.php on line 372
$scripturl . '?action=calendar;month=' . $month . ';year=' . $year . ';day=' . $dayis passed to redirectexit()in Sources/Calendar.php on line 375
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$yearis assigned in Sources/Calendar.php on line 371$_POST,and$yearis assignedin Sources/Calendar.php on line 371
$scripturl . '?action=calendar;month=' . $month . ';year=' . $year . ';day=' . $dayis passed to redirectexit()in Sources/Calendar.php on line 375
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$dayis assigned in Sources/Calendar.php on line 373$_POST,and$dayis assignedin Sources/Calendar.php on line 373
$scripturl . '?action=calendar;month=' . $month . ';year=' . $year . ';day=' . $dayis passed to redirectexit()in Sources/Calendar.php on line 375
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Display.php on line 1696$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Display.php on line 1696
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and!empty($topicGone) ? 'board=' . $board : 'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Display.php on line 1804$_REQUEST,and!empty($topicGone) ? 'board=' . $board : 'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Display.php on line 1804
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg']is passed to redirectexit() in Sources/Load.php on line 806$_REQUEST,and'topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg']is passed to redirectexit()in Sources/Load.php on line 806
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$_GETis passed through key(), and$kis assigned in Sources/Load.php on line 1880$_GET,and$_GETis passed through key(), and$kis assignedin Sources/Load.php on line 1880
'wwwRedirect;' . $k . '=' . $vis passed to redirectexit()in Sources/Load.php on line 1884
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$_GETis passed through current(), and$vis assigned in Sources/Load.php on line 1881$_GET,and$_GETis passed through current(), and$vis assignedin Sources/Load.php on line 1881
'wwwRedirect;' . $k . '=' . $vis passed to redirectexit()in Sources/Load.php on line 1884
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=manageattachments;sa=browse;' . $_REQUEST['type'] . ';sort=' . $_GET['sort'] . (isset($_GET['desc']) ? ';desc' : '') . ';start=' . $_REQUEST['start']is passed to redirectexit() in Sources/ManageAttachments.php on line 917$_REQUEST,and'action=admin;area=manageattachments;sa=browse;' . $_REQUEST['type'] . ';sort=' . $_GET['sort'] . (isset($_GET['desc']) ? ';desc' : '') . ';start=' . $_REQUEST['start']is passed to redirectexit()in Sources/ManageAttachments.php on line 917
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and'action=admin;area=logs;sa=errorlog' . (isset($_REQUEST['desc']) ? ';desc' : '') . ';start=' . $_GET['start'] . (isset($filter) ? ';filter=' . $_GET['filter'] . ';value=' . $_GET['value'] : '')is passed to redirectexit() in Sources/ManageErrors.php on line 367$_GET,and'action=admin;area=logs;sa=errorlog' . (isset($_REQUEST['desc']) ? ';desc' : '') . ';start=' . $_GET['start'] . (isset($filter) ? ';filter=' . $_GET['filter'] . ';value=' . $_GET['value'] : '')is passed to redirectexit()in Sources/ManageErrors.php on line 367
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$contextis assigned in Sources/ManageLanguages.php on line 792$_GET,and$contextis assignedin Sources/ManageLanguages.php on line 792
$contextis assignedin Sources/ManageLanguages.php on line 797
$contextis assignedin Sources/ManageLanguages.php on line 845
'action=admin;area=languages;sa=edit;' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit()in Sources/ManageLanguages.php on line 942
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST['tfid']is passed through explode(), and$file_idis assigned in Sources/ManageLanguages.php on line 793$_REQUEST,and$_REQUEST['tfid']is passed through explode(), and$file_idis assignedin Sources/ManageLanguages.php on line 793
$current_fileis assignedin Sources/ManageLanguages.php on line 842
$current_fileis passed through sprintf(), and$contextis assignedin Sources/ManageLanguages.php on line 1006
$contextis assignedin Sources/ManageLanguages.php on line 1044
'action=admin;area=languages;sa=editlang;lid=' . $context['lang_id']is passed to redirectexit()in Sources/ManageLanguages.php on line 1171
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$contextis assigned in Sources/ManageMaintenance.php on line 1843$_GET,and$contextis assignedin Sources/ManageMaintenance.php on line 1843
$contextis assignedin Sources/ManageMaintenance.php on line 1844
'action=admin;area=maintain;sa=hooks' . $context['filter_url']is passed to redirectexit()in Sources/ManageMaintenance.php on line 1863
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$contextis assigned in Sources/ManageMaintenance.php on line 1844$_GET,and$contextis assignedin Sources/ManageMaintenance.php on line 1844
'action=admin;area=maintain;sa=hooks' . $context['filter_url']is passed to redirectexit()in Sources/ManageMaintenance.php on line 1863
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $_REQUEST['filter'] . ';start=' . $_REQUEST['start']is passed to redirectexit() in Sources/ManageMembers.php on line 1061$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $_REQUEST['filter'] . ';start=' . $_REQUEST['start']is passed to redirectexit()in Sources/ManageMembers.php on line 1061
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']is passed to redirectexit() in Sources/ManageMembers.php on line 1065$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']is passed to redirectexit()in Sources/ManageMembers.php on line 1065
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']is passed to redirectexit() in Sources/ManageMembers.php on line 1101$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']is passed to redirectexit()in Sources/ManageMembers.php on line 1101
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']is passed to redirectexit() in Sources/ManageMembers.php on line 1286$_REQUEST,and'action=admin;area=viewmembers;sa=browse;type=' . $_REQUEST['type'] . ';sort=' . $_REQUEST['sort'] . ';filter=' . $current_filter . ';start=' . $_REQUEST['start']is passed to redirectexit()in Sources/ManageMembers.php on line 1286
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 464$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 464
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 471$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 471
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 486$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 486
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 493$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 493
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 611$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 611
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 680$_REQUEST,and'action=admin;area=permissions;pid=' . $_REQUEST['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 680
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and'action=admin;area=permissions;pid=' . $_GET['pid']is passed to redirectexit() in Sources/ManagePermissions.php on line 965$_GET,and'action=admin;area=permissions;pid=' . $_GET['pid']is passed to redirectexit()in Sources/ManagePermissions.php on line 965
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=admin;area=viewmembers;sa=browse' . (isset($_REQUEST['type']) ? ';type=' . $_REQUEST['type'] : '')is passed to redirectexit() in Sources/ManageRegistration.php on line 35$_REQUEST,and'action=admin;area=viewmembers;sa=browse' . (isset($_REQUEST['type']) ? ';type=' . $_REQUEST['type'] : '')is passed to redirectexit()in Sources/ManageRegistration.php on line 35
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$scripturl . '?action=admin;area=featuresettings;sa=profileedit;fid=' . $_GET['fid'] . ';msg=need_name'is passed to redirectexit() in Sources/ManageSettings.php on line 1740$_GET,and$scripturl . '?action=admin;area=featuresettings;sa=profileedit;fid=' . $_GET['fid'] . ';msg=need_name'is passed to redirectexit()in Sources/ManageSettings.php on line 1740
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$scripturl . '?action=admin;area=featuresettings;sa=profileedit;fid=' . $_GET['fid'] . ';msg=regex_error'is passed to redirectexit() in Sources/ManageSettings.php on line 1744$_GET,and$scripturl . '?action=admin;area=featuresettings;sa=profileedit;fid=' . $_GET['fid'] . ';msg=regex_error'is passed to redirectexit()in Sources/ManageSettings.php on line 1744
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST['topics']is passed through implode(), and'action=restoretopic;topics=' . implode(',', $_REQUEST['topics']) . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit() in Sources/MessageIndex.php on line 771$_REQUEST,and$_REQUEST['topics']is passed through implode(), and'action=restoretopic;topics=' . implode(',', $_REQUEST['topics']) . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit()in Sources/MessageIndex.php on line 771
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$redirect_urlis assigned in Sources/MessageIndex.php on line 800$_REQUEST,and$redirect_urlis assignedin Sources/MessageIndex.php on line 800
$redirect_urlis passed to redirectexit()in Sources/MessageIndex.php on line 853
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$redirect_urlis assigned in Sources/MessageIndex.php on line 810$_POST,and$redirect_urlis assignedin Sources/MessageIndex.php on line 810
$redirect_urlis passed to redirectexit()in Sources/MessageIndex.php on line 853
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_SESSIONis assigned in Sources/MessageIndex.php on line 781$_REQUEST,and$_SESSIONis assignedin Sources/MessageIndex.php on line 781
$redirect_urlis assignedin Sources/MessageIndex.php on line 810
$redirect_urlis passed to redirectexit()in Sources/MessageIndex.php on line 853
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'board=' . $board . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Notify.php on line 86$_REQUEST,and'board=' . $board . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Notify.php on line 86
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Notify.php on line 191$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Notify.php on line 191
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST['filename']is escaped by basename() for file context(s), and$package_nameis assigned in Sources/PackageGet.php on line 576$_REQUEST,and$_REQUEST['filename']is escaped by basename() for file context(s), and$package_nameis assignedin Sources/PackageGet.php on line 576
'action=admin;area=packages;sa=install;package=' . $package_nameis passed to redirectexit()in Sources/PackageGet.php on line 606
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST['package']is escaped by basename() for file context(s), and$package_nameis assigned in Sources/PackageGet.php on line 578$_REQUEST,and$_REQUEST['package']is escaped by basename() for file context(s), and$package_nameis assignedin Sources/PackageGet.php on line 578
'action=admin;area=packages;sa=install;package=' . $package_nameis passed to redirectexit()in Sources/PackageGet.php on line 606
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$contextis assigned in Sources/Packages.php on line 2444$_POST,and$contextis assignedin Sources/Packages.php on line 2444
$contextis assignedin Sources/Packages.php on line 2455
$contextis assignedin Sources/Packages.php on line 2539
'action=admin;area=packages;sa=perms' . (!empty($context['back_look_data']) ? ';back_look=' . base64_encode($smcFunc['json_encode']($context['back_look_data'])) : '') . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit()in Sources/Packages.php on line 2683
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$statusis assigned in Sources/Packages.php on line 2465$_POST,and$statusis assignedin Sources/Packages.php on line 2465
$contextis assignedin Sources/Packages.php on line 2486
$contextis assignedin Sources/Packages.php on line 2488
'action=admin;area=packages;sa=perms' . (!empty($context['back_look_data']) ? ';back_look=' . base64_encode($smcFunc['json_encode']($context['back_look_data'])) : '') . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit()in Sources/Packages.php on line 2499
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$contextis assigned in Sources/Packages.php on line 2544$_POST,and$contextis assignedin Sources/Packages.php on line 2544
$contextis assignedin Sources/Packages.php on line 2546
$contextis assignedin Sources/Packages.php on line 2547
$contextis assignedin Sources/Packages.php on line 2549
$contextis assignedin Sources/Packages.php on line 2594
$contextis assignedin Sources/Packages.php on line 2678
$contextis assignedin Sources/Packages.php on line 2679
'action=admin;area=packages;sa=perms' . (!empty($context['back_look_data']) ? ';back_look=' . base64_encode($smcFunc['json_encode']($context['back_look_data'])) : '') . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit()in Sources/Packages.php on line 2683
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST[$recipientType]is passed through strtr(), and$recipientStringis assigned in Sources/PersonalMessage.php on line 2269$_REQUEST,and$_REQUEST[$recipientType]is passed through strtr(), and$recipientStringis assignedin Sources/PersonalMessage.php on line 2269
$recipientStringis passed through preg_replace(), andpreg_replace('~"[^"]+"~', '', $recipientString)is passed through explode(), andexplode(',', preg_replace('~"[^"]+"~', '', $recipientString))is passed through array_merge(), andarray_merge($matches[1], explode(',', preg_replace('~"[^"]+"~', '', $recipientString)))is passed through array_unique(), and$namedRecipientListis assignedin Sources/PersonalMessage.php on line 2272
$namesNotFoundis assignedin Sources/PersonalMessage.php on line 2287
$nameis assignedin Sources/PersonalMessage.php on line 2335
$nameis passed through sprintf(), and$contextis assignedin Sources/PersonalMessage.php on line 2336
$contextis assignedin Sources/PersonalMessage.php on line 2437
$context['current_label_redirect']is passed to redirectexit()in Sources/PersonalMessage.php on line 2477
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Poll.php on line 152$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Poll.php on line 152
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Poll.php on line 221$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Poll.php on line 221
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Poll.php on line 285$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Poll.php on line 285
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Poll.php on line 908$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Poll.php on line 908
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/Poll.php on line 1006$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/Poll.php on line 1006
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg']is passed to redirectexit() in Sources/Post.php on line 2317$_REQUEST,and'topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg']is passed to redirectexit()in Sources/Post.php on line 2317
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg']is passed to redirectexit() in Sources/PostModeration.php on line 696$_REQUEST,and'topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg']is passed to redirectexit()in Sources/PostModeration.php on line 696
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and'action=profile;u=' . $memID . ';area=showposts;start=' . $_GET['start']is passed to redirectexit() in Sources/Profile-View.php on line 543$_GET,and'action=profile;u=' . $memID . ';area=showposts;start=' . $_GET['start']is passed to redirectexit()in Sources/Profile-View.php on line 543
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and'action=profile;u=' . $memID . ';area=showposts;start=' . $_GET['start']is passed to redirectexit() in Sources/Profile-View.php on line 554$_GET,and'action=profile;u=' . $memID . ';area=showposts;start=' . $_GET['start']is passed to redirectexit()in Sources/Profile-View.php on line 554
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'action=profile;u=' . $_REQUEST['u'] . ';area=showposts;start=' . $_REQUEST['start']is passed to redirectexit() in Sources/RemoveTopic.php on line 151$_REQUEST,and'action=profile;u=' . $_REQUEST['u'] . ';area=showposts;start=' . $_REQUEST['start']is passed to redirectexit()in Sources/RemoveTopic.php on line 151
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit() in Sources/RemoveTopic.php on line 155$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start']is passed to redirectexit()in Sources/RemoveTopic.php on line 155
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and$contextis assigned in Sources/ReportedContent.php on line 97$_GET,and$contextis assignedin Sources/ReportedContent.php on line 97
$contextis assignedin Sources/ReportedContent.php on line 100
$contextis assignedin Sources/ReportedContent.php on line 103
$contextis assignedin Sources/ReportedContent.php on line 106
$contextis assignedin Sources/ReportedContent.php on line 109
$scripturl . '?action=moderate;area=reported' . $context['report_type']is passed to redirectexit()in Sources/ReportedContent.php on line 129
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and'topic=' . $topic . '.msg' . $_POST['msg'] . '#msg' . $_POST['msg']is passed to redirectexit() in Sources/ReportToMod.php on line 272$_POST,and'topic=' . $topic . '.msg' . $_POST['msg'] . '#msg' . $_POST['msg']is passed to redirectexit()in Sources/ReportToMod.php on line 272
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and'reportsent;topic=' . $topic . '.msg' . $_POST['msg'] . '#msg' . $_POST['msg']is passed to redirectexit() in Sources/ReportToMod.php on line 344$_POST,and'reportsent;topic=' . $topic . '.msg' . $_POST['msg'] . '#msg' . $_POST['msg']is passed to redirectexit()in Sources/ReportToMod.php on line 344
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and'action=profile;u=' . $_POST['u']is passed to redirectexit() in Sources/ReportToMod.php on line 396$_POST,and'action=profile;u=' . $_POST['u']is passed to redirectexit()in Sources/ReportToMod.php on line 396
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$_POST['u']is passed to reportUser() in Sources/ReportToMod.php on line 219$_POST,and$_POST['u']is passed to reportUser()in Sources/ReportToMod.php on line 219
'reportsent;action=profile;u=' . $id_memberis passed to redirectexit()in Sources/ReportToMod.php on line 465
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST['search']is escaped by urlencode() for all (url-encoded) context(s), and$scripturl . '?action=mlist;sa=search;fields=name,email;search=' . urlencode($_REQUEST['search'])is passed to redirectexit() in Sources/Search.php on line 260$_REQUEST,and$_REQUEST['search']is escaped by urlencode() for all (url-encoded) context(s), and$scripturl . '?action=mlist;sa=search;fields=name,email;search=' . urlencode($_REQUEST['search'])is passed to redirectexit()in Sources/Search.php on line 260
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_POST,and$topicsis assigned in Sources/SplitTopics.php on line 1015$_POST,and$topicsis assignedin Sources/SplitTopics.php on line 1015
$topicsis passed through min(), and$id_topicis assignedin Sources/SplitTopics.php on line 1361
'action=mergetopics;sa=done;to=' . $id_topic . ';targetboard=' . $target_boardis passed to redirectexit()in Sources/SplitTopics.php on line 1753
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$_REQUEST['topics']is passed to MergeExecute() in Sources/MessageIndex.php on line 863$_REQUEST,and$_REQUEST['topics']is passed to MergeExecute()in Sources/MessageIndex.php on line 863
$topicsis passed through min(), and$id_topicis assignedin Sources/SplitTopics.php on line 1361
'action=mergetopics;sa=done;to=' . $id_topic . ';targetboard=' . $target_boardis passed to redirectexit()in Sources/SplitTopics.php on line 1753
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and$userReceiveris assigned in Sources/Subs-Members.php on line 1261$_REQUEST,and$userReceiveris assignedin Sources/Subs-Members.php on line 1261
'action=profile;u=' . $userReceiveris passed to redirectexit()in Sources/Subs-Members.php on line 1299
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and'action=admin;area=theme;sa=list;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit() in Sources/Themes.php on line 755$_GET,and'action=admin;area=theme;sa=list;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id']is passed to redirectexit()in Sources/Themes.php on line 755
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_GET,and'action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . dirname($_REQUEST['filename'])is passed to redirectexit() in Sources/Themes.php on line 1791$_GET,and'action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . dirname($_REQUEST['filename'])is passed to redirectexit()in Sources/Themes.php on line 1791
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start'] . ';moderate'is passed to redirectexit() in Sources/Topic.php on line 94$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start'] . ';moderate'is passed to redirectexit()in Sources/Topic.php on line 94
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start'] . ';moderate'is passed to redirectexit() in Sources/Topic.php on line 154$_REQUEST,and'topic=' . $topic . '.' . $_REQUEST['start'] . ';moderate'is passed to redirectexit()in Sources/Topic.php on line 154
$setLocationis passed through str_replace()in Sources/Subs.php on line 2916
Response Splitting Attacks
Allowing an attacker to set a response header, opens your application to response splitting attacks; effectively allowing an attacker to send any response, he would like.
General Strategies to prevent injection
In general, it is advisable to prevent any user-data to reach this point. This can be done by white-listing certain values:
if ( ! in_array($value, array('this-is-allowed', 'and-this-too'), true)) { throw new \InvalidArgumentException('This input is not allowed.'); }For numeric data, we recommend to explicitly cast the data: