fmsystem-commits
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Fmsystem-commits] [14875] work post penetration test


From: Sigurd Nes
Subject: [Fmsystem-commits] [14875] work post penetration test
Date: Wed, 30 Mar 2016 18:15:15 +0000

Revision: 14875
          http://svn.sv.gnu.org/viewvc/?view=rev&root=fmsystem&revision=14875
Author:   sigurdne
Date:     2016-03-30 18:15:14 +0000 (Wed, 30 Mar 2016)
Log Message:
-----------
work post penetration test

Modified Paths:
--------------
    trunk/phpgwapi/inc/class.db_pdo.inc.php
    trunk/phpgwapi/inc/class.sessions.inc.php
    trunk/phpgwapi/inc/functions.inc.php
    trunk/preferences/preferences.php

Modified: trunk/phpgwapi/inc/class.db_pdo.inc.php
===================================================================
--- trunk/phpgwapi/inc/class.db_pdo.inc.php     2016-03-29 14:21:35 UTC (rev 
14874)
+++ trunk/phpgwapi/inc/class.db_pdo.inc.php     2016-03-30 18:15:14 UTC (rev 
14875)
@@ -357,7 +357,7 @@
  * CREATE OPERATOR ~@| (LEFTARG = jsonb, RIGHTARG = text[], PROCEDURE = 
jsonb_exists_any);
  * CREATE OPERATOR ~@& (LEFTARG = jsonb, RIGHTARG = text[], PROCEDURE = 
jsonb_exists_all);
  */
-                       self::sanitize($sql);
+//                     self::sanitize($sql);//killing performance
                        self::_get_fetchmode();
                        self::set_fetch_single($_fetch_single);
 
@@ -457,7 +457,7 @@
 
                function limit_query($sql, $offset, $line = '', $file = '', 
$num_rows = 0)
                {
-                       self::sanitize($sql);
+//                     self::sanitize($sql);//killing performance
 
                        $this->_get_fetchmode();
 

Modified: trunk/phpgwapi/inc/class.sessions.inc.php
===================================================================
--- trunk/phpgwapi/inc/class.sessions.inc.php   2016-03-29 14:21:35 UTC (rev 
14874)
+++ trunk/phpgwapi/inc/class.sessions.inc.php   2016-03-30 18:15:14 UTC (rev 
14875)
@@ -830,19 +830,6 @@
                */
                public function phpgw_setcookie($cookiename, $cookievalue='', 
$cookietime=0)
                {
-/*                     $secure = phpgw::get_var('HTTPS', 'bool', 'SERVER');
-
-                       if( isset( 
$GLOBALS['phpgw_info']['server']['webserver_url'] ) )
-                       {
-                               $webserver_url = 
$GLOBALS['phpgw_info']['server']['webserver_url'] . '/';
-                       }
-                       else
-                       {
-                               $webserver_url = '/';
-                       }
-*/
-//                     setcookie($cookiename, $cookievalue, $cookietime, 
parse_url($webserver_url, PHP_URL_PATH),
-//                                     $this->_cookie_domain, $secure, true);
                        setcookie($cookiename, $cookievalue, $cookietime);
                }
 

Modified: trunk/phpgwapi/inc/functions.inc.php
===================================================================
--- trunk/phpgwapi/inc/functions.inc.php        2016-03-29 14:21:35 UTC (rev 
14874)
+++ trunk/phpgwapi/inc/functions.inc.php        2016-03-30 18:15:14 UTC (rev 
14875)
@@ -400,8 +400,19 @@
         */
        function phpgw_handle_exception(Exception $e)
        {
+               $help = 'Please contact your administrator for assistance';
+
+               if (!ini_get('display_errors'))
+               {
+                       echo <<<HTML
+                               <h1>Uncaught Exception</h1>
+                               <p>{$help}</p>
+HTML;
+                       exit;
+               }
+
                $msg = $e->getMessage();
-               $help = 'Please contact your administrator for assistance';
+               $help = 'Please contact your administrator for assistance.';
                $trace = $e->getTraceAsString();
                echo <<<HTML
                        <h1>Uncaught Exception: {$msg}</h1>

Modified: trunk/preferences/preferences.php
===================================================================
--- trunk/preferences/preferences.php   2016-03-29 14:21:35 UTC (rev 14874)
+++ trunk/preferences/preferences.php   2016-03-30 18:15:14 UTC (rev 14875)
@@ -531,7 +531,7 @@
                $GLOBALS['type'] = 'user';
        }
 
-       $show_help = true;
+       $show_help = false;
        if ( isset($session_data['show_help']) 
                && $session_data['show_help'] != '' 
                && $session_data['appname'] == $appname )




reply via email to

[Prev in Thread] Current Thread [Next in Thread]