/usr/share/spotweb/lib/SpotReq.php is in spotweb 20111002+dfsg-4.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 | <?php
class SpotReq {
static private $_merged = array();
static private $_xsrfsecret = '';
static private $_settings = null;
function initialize($settings) {
self::$_merged = array_merge($_POST, $_GET);
self::$_xsrfsecret = $settings->get('xsrfsecret');
self::$_settings = $settings;
}
function get($varName, $escapeType = 'none') {
if( is_array($varName) ) {
return self::escape(self::$_merged[$varName[0]][$varName[1]], $escapeType);
} else {
return self::escape(self::$_merged[$varName], $escapeType);
}
}
function getForm($formName, $submitNames) {
if (isset($_POST[$formName])) {
$form = $_POST[$formName];
} else {
return array('http_referer' => $this->getHttpReferer());
} # else
foreach($submitNames as $submitName) {
if (isset($form[$submitName])) {
if ($form[$submitName]) {
/* Als er een ongeldige XSRF value is gegeven, moeten we
alle submit buttons verwijderen */
if (!$this->isXsrfValid($formName)) {
foreach($submitNames as $tmpName) {
unset($form[$tmpName]);
} # foreach
} # if
} # if
} # if
} # foreach
# Vul altijd een referer in als die nog niet ingevuld is
if (!isset($form['http_referer'])) {
$form['http_referer'] = $this->getHttpReferer();
} # if
return $form;
} # getForm
function getHttpReferer() {
if (isset($_SERVER['HTTP_REFERER'])) {
return $_SERVER['HTTP_REFERER'];
} else {
return self::$_settings->get('spotweburl');
} # else
} # getHttpReferer
function cleanup($var) {
if (is_array($var)) {
foreach($var as &$value) {
$value = $this->cleanup($value);
} # foreach
} else {
$var = trim($var);
} # else
return $var;
} # cleanup }
static function isXsrfValid($form) {
if (!isset($_POST[$form]['xsrfid'])) {
return false;
} # if
# Explode the different values, if we don't agree
# on the amount of values, exit immediately
$xsrfVals = explode(":", $_POST[$form]['xsrfid']);
if (count($xsrfVals) != 3) {
return false;
} # if
# start validating, an XSRF cookie is only valid for 30 minutes
if ( (time() - 1800) > $xsrfVals[0]) {
return false;
} # if
# if action isn't the action we requested
if ($xsrfVals[1] != $form) {
return false;
} # if
# and check the hash
if (sha1($xsrfVals[0] . ':' . $xsrfVals[1] . self::$_xsrfsecret) != $xsrfVals[2]) {
return false;
} # if
return true;
} # isXsrfValid
static function generateXsrfCookie($action) {
# XSRF cookie contains 3 fields:
# 1 - Current timestamp in unixtime
# 2 - action (for example, 'login' or 'postcomment')
# 3 - sha1 of the preceding 2 strings including ':', but the secret key appended as salt
$xsrfCookie = time() . ':' . $action;
$xsrfCookie .= ':' . sha1($xsrfCookie . self::$_xsrfsecret);
return $xsrfCookie;
} # generateXsrfCookie
function doesExist($varName) {
if( is_array($varName) ) {
return isset(self::$_merged[$varName[0]][$varName[1]]);
}
else {
return isset(self::$_merged[$varName]);
}
}
function getDef($varName, $defValue, $escapeType = 'none') {
if( !isset(self::$_merged[$varName]) ) {
return $defValue;
} else {
return self::get($varName, $escapeType);
}
}
function getSrvVar($varName, $defValue = '', $escapeType = 'none') {
if( isset($_SERVER[$varName]) ) {
return self::escape($_SERVER[$varName], $escapeType);
} else {
return $defValue;
}
}
function escape($var, $escapeType) {
if( is_array($var) ) {
foreach($var as $key => $value) {
$var[$key] = self::escape($value, $escapeType);
}
return $var;
} else {
// and start escaping
switch( $escapeType ) {
case 'html' : return htmlspecialchars($var);
break;
case 'none' : return $var;
break;
default : die('Unknown escape type: ' . $escapeType);
} # switch
} #else
}
}
|