net.php.smarty/core/core.is_secure.php

<?php
/**
 * Smarty plugin
 * @package Smarty
 * @subpackage plugins
 */

/**
 * determines if a resource is secure or not.
 *
 * @param string $resource_type
 * @param string $resource_name
 * @return boolean
 */

//  $resource_type, $resource_name

function smarty_core_is_secure($params, &$smarty)
{
    if (!$smarty->security || $smarty->security_settings['INCLUDE_ANY']) {
        return true;
    }

    if ($params['resource_type'] == 'file') {
        $_rp = realpath($params['resource_name']);
        if (isset($params['resource_base_path'])) {
            foreach ((array)$params['resource_base_path'] as $curr_dir) {
                if ( ($_cd = realpath($curr_dir)) !== false &&
                     strncmp($_rp, $_cd, strlen($_cd)) == 0 &&
                     $_rp{strlen($_cd)} == DIRECTORY_SEPARATOR ) {
                    return true;
                }
            }
        }
        if (!empty($smarty->secure_dir)) {
            foreach ((array)$smarty->secure_dir as $curr_dir) {
                if ( ($_cd = realpath($curr_dir)) !== false &&
                     strncmp($_rp, $_cd, strlen($_cd)) == 0 &&
                     $_rp{strlen($_cd)} == DIRECTORY_SEPARATOR ) {
                    return true;
                }            
            }
        }
    } else {
        // resource is not on local file system
        return call_user_func_array(
            $smarty->_plugins['resource'][$params['resource_type']][0][2],
            array($params['resource_name'], &$smarty));
    }

    return false;
}

/* vim: set expandtab: */

?>
1	joko	1.1	<?php
2			/**
3			* Smarty plugin
4			* @package Smarty
5			* @subpackage plugins
6			*/
7
8			/**
9			* determines if a resource is secure or not.
10			*
11			* @param string $resource_type
12			* @param string $resource_name
13			* @return boolean
14			*/
15
16			// $resource_type, $resource_name
17
18			function smarty_core_is_secure($params, &$smarty)
19			{
20			if (!$smarty->security \|\| $smarty->security_settings['INCLUDE_ANY']) {
21			return true;
22			}
23
24			if ($params['resource_type'] == 'file') {
25			$_rp = realpath($params['resource_name']);
26			if (isset($params['resource_base_path'])) {
27			foreach ((array)$params['resource_base_path'] as $curr_dir) {
28			if ( ($_cd = realpath($curr_dir)) !== false &&
29			strncmp($_rp, $_cd, strlen($_cd)) == 0 &&
30			$_rp{strlen($_cd)} == DIRECTORY_SEPARATOR ) {
31			return true;
32			}
33			}
34			}
35			if (!empty($smarty->secure_dir)) {
36			foreach ((array)$smarty->secure_dir as $curr_dir) {
37			if ( ($_cd = realpath($curr_dir)) !== false &&
38			strncmp($_rp, $_cd, strlen($_cd)) == 0 &&
39			$_rp{strlen($_cd)} == DIRECTORY_SEPARATOR ) {
40			return true;
41			}
42			}
43			}
44			} else {
45			// resource is not on local file system
46			return call_user_func_array(
47			$smarty->_plugins['resource'][$params['resource_type']][0][2],
48			array($params['resource_name'], &$smarty));
49			}
50
51			return false;
52			}
53
54			/* vim: set expandtab: */
55
56			?>
MailToCvsAdmin">MailToCvsAdmin	ViewVC Help
Powered by ViewVC 1.1.26