cms_action_security_test.php File Reference

Go to the source code of this file.

Variables
	$root = dirname(__DIR__)
	$cms = file_get_contents($root . '/include/dbxContent_cms.class.php')
	$seo = file_get_contents($root . '/include/dbxContent_seo.class.php')
	$lng = file_get_contents(dirname(__DIR__, 2) . '/dbxContent/include/dbxContentLngSync.class.php')
	$fail
if(!is_string( $cms)||!is_string( $seo)||!is_string( $lng)) foreach(array($cms, $seo) as $source)	$cmsActions
foreach( $cmsActions as $action) if(strpos($cms, "if (\$action === 'cms_media')")===false||strpos($cms, "get_modul_var('sync', 0, 'int') === 1")===false||strpos($cms, 'if($this->action_requires_token($action) &&! $this->check_action_token($action))')===false) if(strpos( $seo, "if (\$action === 'seo_save' && !\$this->check_action_token(\$action))")===false	if )(preg_match('/\b(?:PRAGMA|ALTER\s+TABLE|CREATE\s+(?:TABLE|INDEX))\b/i', $cms)===1||preg_match('/\b(?:PRAGMA|ALTER\s+TABLE|CREATE\s+(?:TABLE|INDEX))\b/i', $lng)===1)

Variable Documentation

$cms

$cms = file_get_contents($root . '/include/dbxContent_cms.class.php')

Definition at line 4 of file cms_action_security_test.php.

$cmsActions

if(!is_string($cms)||!is_string($seo)||!is_string($lng)) foreach (array( $cms, $seo) as $source) $cmsActions

Initial value:

            = array(
   'cms_save',
   'cms_new_page',
   'cms_duplicate_page',
   'cms_delete_page',
   'cms_move_node',
   'cms_upload',
   'cms_delete_media',
   'cms_assign_media',
   'cms_sort_media',
)

Definition at line 24 of file cms_action_security_test.php.

$fail

$fail

Initial value:

      = static function (string $message, int $code): void {
   fwrite(STDERR, "FAIL: $message\n");
   exit($code);
}

Definition at line 8 of file cms_action_security_test.php.

$lng

$lng = file_get_contents(dirname(__DIR__, 2) . '/dbxContent/include/dbxContentLngSync.class.php')

Definition at line 6 of file cms_action_security_test.php.

Referenced by dbx\dbxContent_admin\add_content(), dbxWebApp\check_lng(), dbxWebApp\check_perma(), dbxWebApp\check_remember(), dbx\dbxContent\dbxContentPageCache\contentPath(), dbx\dbxContent\dbxContentPageCache\currentLng(), dbx_is_page(), dbx_lng_current(), dbx_lng_name(), dbx_lng_resolve_file(), dbx_modul_translate(), dbx_myLKW_lkw_grid_fields(), dbx\dbxContent\dbxContentLng\ddContent(), dbx\dbxContent\dbxContentLng\ddFolder(), dbx\dbxContent_admin\del_content(), dbxWebApp\design_load(), dbx\dbxContent\dbxContentLngSync\folderDeletable(), dbx\dbxContent\dbxContentPageCache\fullPagePath(), dbx\dbxKi\dbxKiBriefingService\handlePageUpdatePreviewJson(), dbx\dbxContent\dbxContentPermalinkIndex\homePath(), dbx\dbxContent\dbxContentPermalinkIndex\indexPath(), dbx\dbxContent\dbxContentHome\isHomePage(), dbx\dbxContent\dbxContentLngSync\isMasterLng(), dbx\dbxContent\dbxContentPermalinkIndex\load(), dbx\dbxContent\dbxContentLngSync\masterLng(), dbx\dbxContent_admin\dbxContent_sections\media_next_record(), dbx\dbxContent\dbxContentPageCache\menuPath(), dbx\dbxAdmin\dbxModuleRegistry\moduleImageEmptyPlaceholderAlt(), dbx\dbxAdmin\dbxModuleRegistry\moduleImageEmptyPlaceholderUrl(), dbx\dbxContent\dbxContentPageCache\permalinkContentPath(), dbxTPL\read_tpl(), dbx\dbxContent\dbxContentPageCache\readContent(), dbx\dbxContent\dbxContentPermalinkIndex\readHomeCid(), dbx\dbxContent\dbxContentPageCache\readMenu(), dbx\dbxContent\dbxContentPageCache\readPermalinkContent(), dbx\dbxContent\dbxContentHome\refreshHomeCache(), dbx\dbxContent\dbxContentPermalinkIndex\removeByCid(), dbx\dbxContent\dbxContentPermalinkIndex\removeByPermalink(), dbx\dbxMenu\dbxContent_menu\render_placeholder(), dbx\dbxContent\dbxContentLngSync\renderLngBar(), dbx\dbxKi\dbxKiBriefingService\renderPageCreateForm(), dbx\dbxKi\dbxKiBriefingService\renderPageUpdateForm(), dbx\dbxContent\dbxContentPermalinkIndex\resolve(), dbx\dbxContent\dbxContentHome\resolveCid(), dbx\dbxContent\dbxContentContextHelp\resolveCidByPermalink(), dbx\dbxContent\dbxContentLngSync\resolveIdByUid(), dbx\dbxContent_admin\dbxContent_edit\run(), dbx\dbxContent_admin\dbxContent_sysdata\run(), dbx\dbxContent_admin\dbxFolder_edit\run(), dbx\dbxMenu\dbxContent_menu\run(), dbx\dbxMenu\run(), dbxWebApp\run(), dbx\dbxContent_admin\dbxContent_content\run_nix(), dbx\dbxContent\dbxContentPermalinkIndex\save(), dbx\dbxContent\dbxContentLngSync\slaveLngs(), dbxWebApp\translate(), dbx\dbxContent\dbxContentPermalinkIndex\upsertPage(), dbx\dbxContent\dbxContentPageCache\writeContent(), dbx\dbxContent\dbxContentPermalinkIndex\writeHomeCid(), and dbx\dbxContent\dbxContentPageCache\writeMenu().

$root

$root = dirname(__DIR__)

Definition at line 3 of file cms_action_security_test.php.

$seo

$seo = file_get_contents($root . '/include/dbxContent_seo.class.php')

Definition at line 5 of file cms_action_security_test.php.

if

foreach($cmsActions as $action) if(strpos( $cms, "if (\$action === 'cms_media')")===false||strpos( $cms, "get_modul_var('sync', 0, 'int') === 1")===false||strpos( $cms, 'if( $this->action_requires_token( $action) &&! $this->check_action_token( $action))')===false) if(strpos($seo, "if (\$action === 'seo_save' && !\$this->check_action_token(\$action))")===false if) (preg_match('/\b(?:PRAGMA|ALTER\s+TABLE|CREATE\s+(?:TABLE|INDEX))\b/i', $cms)===1||preg_match('/\b(?:PRAGMA|ALTER\s+TABLE|CREATE\s+(?:TABLE|INDEX))\b/i', $lng)===1)

(

preg_match('/\b(?:PRAGMA|ALTER\s+TABLE|CREATE\s+(?:TABLE|INDEX))\b/i', $cms)

= == 1 || preg_match('/\b(?:PRAGMA|ALTER\s+TABLE|CREATE\s+(?:TABLE|INDEX))\b/i', $lng) === 1

)

Definition at line 51 of file cms_action_security_test.php.