This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * @package fwolflib |
||
4 | * @subpackage func |
||
5 | * @copyright Copyright 2007-2012, Fwolf |
||
6 | * @author Fwolf <[email protected]> |
||
7 | * @since 2007-01-21 |
||
8 | */ |
||
9 | |||
10 | |||
11 | require_once(dirname(__FILE__) . '/../fwolflib.php'); |
||
12 | require_once(dirname(__FILE__) . '/string.php'); |
||
13 | |||
14 | |||
15 | /** |
||
16 | * Get variant from $_COOKIE |
||
17 | * |
||
18 | * @deprecated Use Fwlib\Util\HttpUtil::getCookie() |
||
19 | * @param string $var Name of variant |
||
20 | * @param mixed $default If variant is not given, return this. |
||
21 | * @return mixed |
||
22 | */ |
||
23 | function GetCookie($var, $default='') |
||
24 | { |
||
25 | return GetRequest($_COOKIE, $var, $default); |
||
26 | } // end of func GetCookie |
||
27 | |||
28 | |||
29 | /** |
||
30 | * Get variant from $_GET |
||
31 | * |
||
32 | * @deprecated Use Fwlib\Util\HttpUtil::getGet() |
||
33 | * @param string $var Name of variant |
||
34 | * @param mixed $default If variant is not given, return this. |
||
35 | * @return mixed |
||
36 | */ |
||
37 | function GetGet ($var, $default='') { |
||
38 | return GetRequest($_GET, $var, $default); |
||
39 | /* |
||
40 | if (isset($_GET[$var])) |
||
41 | $val = $_GET[$var]; |
||
42 | else |
||
43 | $val = $default; |
||
44 | return $val; |
||
45 | */ |
||
46 | } // end of func GetGet |
||
47 | |||
48 | |||
49 | /** |
||
50 | * Get and return modified url param |
||
51 | * |
||
52 | * If $k is string, then $v is string too and means add $k=$v. |
||
53 | * if $k is array, then $v is array to, |
||
54 | * and k-v/values in $k/$v is added/removed to/from url param. |
||
55 | * |
||
56 | * @deprecated Use Fwlib\Util\HttpUtil::getUrlParam() |
||
57 | * @param mixed $k |
||
58 | * @param mixed $v |
||
59 | * @param boolean $b_with_url If true, return value include self url. |
||
60 | * @return string '?' and '&' included. |
||
61 | */ |
||
62 | function GetParam ($k = '', $v = '', $b_with_url = false) { |
||
63 | $ar_param = $_GET; |
||
64 | if (!empty($ar_param) && !get_magic_quotes_gpc()) { |
||
65 | foreach ($ar_param as &$p) { |
||
66 | $p = addslashes($p); |
||
67 | } |
||
68 | } |
||
69 | |||
70 | // $k $v is string |
||
71 | View Code Duplication | if (!is_array($k) && !is_array($v) && '' != $k) { |
|
72 | $ar_param[addslashes($k)] = addslashes($v); |
||
73 | } |
||
74 | |||
75 | // $k $v is array |
||
76 | if (is_array($k)) { |
||
77 | foreach ($k as $key => $val) |
||
78 | $ar_param[addslashes($key)] = addslashes($val); |
||
79 | if (!is_array($v)) |
||
80 | $v = array($v); |
||
81 | foreach ($v as $val) |
||
82 | if (isset($ar_param[$val])) |
||
83 | unset($ar_param[$val]); |
||
84 | } |
||
85 | |||
86 | // Combine param |
||
87 | $s = ''; |
||
88 | if (!empty($ar_param)) |
||
89 | foreach ($ar_param as $k => $v) |
||
90 | $s .= "&$k=$v"; |
||
91 | if (!empty($s)) |
||
92 | $s{0} = '?'; |
||
93 | |||
94 | // Add self url |
||
95 | if (true == $b_with_url) |
||
0 ignored issues
–
show
|
|||
96 | $s = GetSelfUrl(false) . $s; |
||
97 | |||
98 | return $s; |
||
99 | } // end of func GetParam |
||
100 | |||
101 | |||
102 | /** |
||
103 | * Get variant from $_POST |
||
104 | * |
||
105 | * @deprecated Use Fwlib\Util\HttpUtil::getPost() |
||
106 | * @param string $var Name of variant |
||
107 | * @param mixed $default If variant is not given, return this. |
||
108 | * @return mixed |
||
109 | */ |
||
110 | function GetPost ($var, $default='') { |
||
111 | return GetRequest($_POST, $var, $default); |
||
112 | /* |
||
113 | if (isset($_POST[$var])) |
||
114 | $val = $_POST[$var]; |
||
115 | else |
||
116 | $val = $default; |
||
117 | return $val; |
||
118 | */ |
||
119 | } // end of func GetPost |
||
120 | |||
121 | |||
122 | /** |
||
123 | * Get variant from $_REQUEST |
||
124 | * |
||
125 | * @deprecated Use Fwlib\Util\HttpUtil::getRequest() |
||
126 | * @param array $r Request, $_GET/$_POST etc... |
||
127 | * @param string $var Name of variant |
||
128 | * @param mixed $default If variant is not given, return this |
||
129 | * @return mixed |
||
130 | */ |
||
131 | function GetRequest (&$r, $var, $default = null) |
||
132 | { |
||
133 | if (isset($r[$var])) { |
||
134 | $val = $r[$var]; |
||
135 | |||
136 | $filter = FILTER_SANITIZE_SPECIAL_CHARS; |
||
137 | if (is_array($val)) { |
||
138 | $val = filter_var_array($val, $filter); |
||
139 | } else { |
||
140 | $val = filter_var($val, $filter); |
||
141 | } |
||
142 | |||
143 | // Deal with special chars in parameters |
||
144 | // magic_quotes_gpc is deprecated from php 5.4.0 |
||
145 | // if (version_compare(PHP_VERSION, '5.4.0', '>=') |
||
146 | // || !get_magic_quotes_gpc()) |
||
147 | // $val = AddslashesRecursive($val); |
||
148 | } |
||
149 | else { |
||
150 | $val = $default; |
||
151 | } |
||
152 | |||
153 | return $val; |
||
154 | } |
||
155 | |||
156 | |||
157 | /** |
||
158 | * Get self url which user visit |
||
159 | * |
||
160 | * @deprecated Use Fwlib\Util\HttpUtil::getSelfUrl() |
||
161 | * @param boolean $with_get_param // Include get param in url, default yes. |
||
162 | * @return string |
||
163 | */ |
||
164 | function GetSelfUrl($with_get_param = true) { |
||
165 | if (isset($_SERVER["HTTPS"]) && 'on' == $_SERVER["HTTPS"]) |
||
166 | $url = 'https://'; |
||
167 | else |
||
168 | $url = 'http://'; |
||
169 | |||
170 | $s_t = ($with_get_param) ? $_SERVER['REQUEST_URI'] : $_SERVER["SCRIPT_NAME"]; |
||
171 | |||
172 | $url .= $_SERVER["HTTP_HOST"] . $s_t; |
||
173 | return $url; |
||
174 | } // end of func GetSelfUrl |
||
175 | |||
176 | |||
177 | /** |
||
178 | * Get variant from $_SESSION,will also rewrite SESSION to keep it |
||
179 | * |
||
180 | * @deprecated Use Fwlib\Util\HttpUtil::getSession() |
||
181 | * @param string $var Name of variant |
||
182 | * @param mixed $default If variant is not given, return this. |
||
183 | * @return mixed |
||
184 | */ |
||
185 | function GetSession($var, $default='') { |
||
186 | $_SESSION[$var] = GetRequest($_SESSION, $var, $default); |
||
187 | return $_SESSION[$var]; |
||
188 | } // end of func GetSession |
||
189 | |||
190 | |||
191 | /** |
||
192 | * Get url plan from url or self |
||
193 | * |
||
194 | * eg: http://www.google.com/, plan = http |
||
195 | * |
||
196 | * @deprecated Use Fwlib\Util\HttpUtil::getUrlPlan() |
||
197 | * @param string $url Default: self url |
||
198 | * @return string |
||
199 | */ |
||
200 | function GetUrlPlan($url = '') { |
||
201 | if (empty($url)) |
||
202 | $url = GetSelfUrl(); |
||
203 | $i = preg_match('/^(\w+):\/\//', $url, $ar); |
||
204 | if (1 == $i) |
||
205 | return $ar[1]; |
||
206 | else |
||
207 | return ''; |
||
208 | } // end of func GetUrlPlan |
||
209 | |||
210 | ?> |
||
211 |
When comparing two booleans, it is generally considered safer to use the strict comparison operator.