// // // ///////////////////////////////////////////////////////////////// // $Id$ $mainPath = "./"; ///////////////////////////////////////////////////////////////// // Schutzmaßnahme gegen Überschreiben von Variablen // Quelle: PHP-Sicherheit, Seite 68 // Auswirkungen von register_globals=on rückgängig machen if ((bool) @ ini_get('register_globals')) { $superglobals = array ( $_ENV, $_GET, $_POST, $_COOKIE, $_FILES, $_SERVER ); if (isset ($_SESSION)) { array_unshift($superglobals, $_SESSION); } $knownglobals = array ( // bekannte Superglobals und reservierte Variablen '_ENV', 'HTTP_ENV_VARS', '_GET', 'HTTP_GET_VARS', '_POST', 'HTTP_POST_VARS', '_COOKIE', 'HTTP_COOKIE_VARS', '_FILES', 'HTTP_FILES_VARS', '_SERVER', 'HTTP_SERVER_VARS', '_SESSION', 'HTTP_SESSION_VARS', '_REQUEST', // Variablen, die hier verwendet werden: 'superglobals', 'knownglobals', 'superglobal', 'global', 'void' ); foreach ($superglobals as $superglobal) { foreach ($superglobal as $global => $void) { if (!in_array($global, $knownglobals)) { unset ($GLOBALS[$global]); } } } } ///////////////////////////////////////////////////////////////// // zunächst alles Initialisieren require_once ($mainPath . "setup.php"); // nun den eigentlichen Pageaufbau if ($eisPortalIsActive == "yes") { require_once ($mainPath . "PortalHead.class.php"); // require_once ($mainPath . "PortalNavigation.php"); // require_once ($mainPath . "PortalMain.php"); // require_once ($mainPath . "PortalFoot.php"); $portalHead = new PortalHead(); // hier folgt noch viel... ;-) } else { $portalIsDisabled = ""; $portalIsDisabled .= "" . _("EISPortal - The EISFair Webfrontend") . ""; $portalIsDisabled .= "



" . _("EisPortal is disabled at the moment, please ask the administrator") . "



"; $portalIsDisabled .= ""; echo $portalIsDisabled; } ?>