c74be9c4d9af1dfc8067bd492c319fba2886d58f
[squirrelmail.git] / src / validate.php
1 <?php
2 /**
3 * validate.php
4 *
5 * Copyright (c) 1999-2000 The SquirrelMail Development Team
6 * Licensed under the GNU GPL. For full terms see the file COPYING.
7 *
8 * $Id$
9 */
10
11 if (defined ('validate_php')) { return; }
12 define ('validate_php', true);
13
14 session_start();
15 require_once('../functions/i18n.php');
16 require_once('../functions/auth.php');
17
18 is_logged_in();
19
20 /* Remove all slashes for form values. */
21 if (get_magic_quotes_gpc()) {
22 global $REQUEST_METHOD;
23
24 if ($REQUEST_METHOD == "POST") {
25 global $HTTP_POST_VARS;
26 RemoveSlashes($HTTP_POST_VARS);
27 } else if ($REQUEST_METHOD == "GET") {
28 global $HTTP_GET_VARS;
29 RemoveSlashes($HTTP_GET_VARS);
30 }
31 }
32
33 /**
34 * Auto-detection
35 *
36 * if $send (the form button's name) contains "\n" as the first char
37 * and the script is compose.php, then trim everything. Otherwise, we
38 * don't have to worry.
39 *
40 * This is for a RedHat package bug and a Konqueror (pre 2.1.1?) bug
41 */
42 global $send, $PHP_SELF;
43 if (isset($send)
44 && (substr($send, 0, 1) == "\n")
45 && (substr($PHP_SELF, -12) == '/compose.php')) {
46 if ($REQUEST_METHOD == "POST") {
47 global $HTTP_POST_VARS;
48 TrimArray($HTTP_POST_VARS);
49 } else {
50 global $HTTP_GET_VARS;
51 TrimArray($HTTP_GET_VARS);
52 }
53 }
54
55 /************************************/
56 /* Trims every element in the array */
57 /************************************/
58 function TrimArray(&$array) {
59 foreach ($array as $k => $v) {
60 global $$k;
61 if (is_array($$k)) {
62 foreach ($$k as $k2 => $v2) {
63 $$k[$k2] = substr($v2, 1);
64 }
65 } else {
66 $$k = substr($v, 1);
67 }
68
69 /* Re-assign back to array. */
70 $array[$k] = $$k;
71 }
72 }
73
74
75 /***************************************************/
76 /* Removes slashes from every element in the array */
77 /***************************************************/
78 function RemoveSlashes(&$array) {
79 foreach ($array as $k => $v) {
80 global $$k;
81 if (is_array($$k)) {
82 foreach ($$k as $k2 => $v2) {
83 $newArray[stripslashes($k2)] = stripslashes($v2);
84 }
85 $$k = $newArray;
86 } else {
87 $$k = stripslashes($v);
88 }
89
90 /* Re-assign back to the array. */
91 $array[$k] = $$k;
92 }
93 }
94
95 /**
96 * Everyone needs stuff from config, and config needs stuff from
97 * strings.php, so include them both here.
98 *
99 * Include them down here instead of at the top so that all config
100 * variables overwrite any passed in variables (for security).
101 */
102 require_once('../functions/strings.php');
103 require_once('../config/config.php');
104 require_once('../src/load_prefs.php');
105 require_once('../functions/page_header.php');
106 require_once('../functions/prefs.php');
107
108 /* Set up the language (i18n.php was included by auth.php). */
109 global $username, $data_dir;
110 set_up_language(getPref($data_dir, $username, 'language'));
111 ?>