+ 'send_encoding' => array('lang' => 'SEND_ENCODING', 'type' => 'radio:yes_no', 'explain' => true),

+ 'ranks_path' => array('lang' => 'RANKS_PATH', 'type' => 'text:20:255', 'explain' => true),

+

+ 'legend3' => 'SERVER_URL_SETTINGS',

+ 'force_server_vars' => array('lang' => 'FORCE_SERVER_VARS', 'type' => 'radio:yes_no', 'explain' => true),

+ 'server_protocol' => array('lang' => 'SERVER_PROTOCOL', 'type' => 'text:10:10', 'explain' => true),

+ 'server_name' => array('lang' => 'SERVER_NAME', 'type' => 'text:40:255', 'explain' => true),

+ 'server_port' => array('lang' => 'SERVER_PORT', 'type' => 'text:5:5', 'explain' => true),

+// 'script_path' => array('lang' => 'SCRIPT_PATH', 'type' => 'text::255', 'explain' => true),

+

+ $action = key(request_var('action', array('' => 0)));

+

+* Generate board url (example: http://www.foo.bar/phpBB)

+ global $config, $user;

+

+ $server_name = (!empty($_SERVER['SERVER_NAME'])) ? $_SERVER['SERVER_NAME'] : getenv('SERVER_NAME');

+ $server_port = (!empty($_SERVER['SERVER_PORT'])) ? (int) $_SERVER['SERVER_PORT'] : (int) getenv('SERVER_PORT');

+

+ $url = (($config['cookie_secure']) ? 'https://' : 'http://') . $server_name;

+ // Forcing server vars is the only way to specify/override the protocol

+ if ($config['force_server_vars'] || !$server_name)

+ {

+ $server_protocol = ($config['server_protocol']) ? $config['server_protocol'] : (($config['cookie_secure']) ? 'https://' : 'http://');

+ $server_name = $config['server_name'];

+ $server_port = (int) $config['server_port'];

+

+ $url = $server_protocol . $server_name;

+ }

+ if ($server_port && (($config['cookie_secure'] && $server_port <> 443) || (!$config['cookie_secure'] && $server_port <> 80)))

+ {

+ $url .= ':' . $server_port;

+ }

+

+ $url .= $user->page['root_script_path'];

+

+ return $url;

+* Do not prepend url with $phpbb_root_path

+* If not prefixed by / or full url given the board url will be prefixed

+ $url = generate_board_url() . '/' . $url;

+ /**

+ * Make sure no HTTP Response Splitting attacks are possible

+ */

+

+ // re-add $SID / transform & to &amp; for user->page (user->page is always using &)

+ $use_page = ($u_action) ? $phpbb_root_path . $u_action : $phpbb_root_path . str_replace('&', '&amp;', $user->page['page']);

+ $u_action = (strpos($use_page, 'sid=') === false) ? ((strpos($use_page, '?') !== false) ? str_replace('?', $SID . '&amp;', $use_page) : $use_page . '?' . str_replace('?', '', $SID)) : $use_page;

+ $u_action .= ((strpos($u_action, '?') === false) ? '?' : '&amp;') . 'confirm_key=' . $confirm_key;

+ // We just use what the session code determined...

+ $redirect = htmlspecialchars($user->page['page_name'] . $SID . '&' . $user->page['query_string']);

+ 'SCRIPT_NAME' => str_replace($phpEx, '', $user->page['page_name']),

+

+ // Make sure $this->root_path is layed out the same way as the $user->page['root_script_path'] value (prefixed with / and no / at the end)

+ $this->root_path = str_replace('\\', '/', $this->root_path);

+ global $user;

+

+ return array('host' => 'localhost' , 'username' => 'anonymous', 'password' => '', 'root_path' => $user->page['root_script_path'], 'port' => 21, 'timeout' => 10);

+ $db->sql_freeresult($result);

+ $db->sql_freeresult($result);

+ $redirect = request_var('redirect', "index.$phpEx$SID");

+ trigger_error($user->lang[$success_msg] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $phpbb_root_path . $redirect . '">', '</a>') . '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], "<a href=\"{$phpbb_root_path}viewforum.$phpEx$SID&amp;f=" . $forum_id . '">', '</a>'));

+ $redirect = request_var('redirect', "index.$phpEx$SID");

+ if (preg_match('#' . preg_quote(generate_board_url(), '#') . '/([^ \t\n\r<"\']+)#i', $url) ||

+ $this->magic_url(generate_board_url());

+ function magic_url($server_url)

+ $match[] = '#(^|[\n ]|\()(' . preg_quote($server_url, '#') . ')/([^ \t\n\r<"\'\)&]+|&(?!lt;))*)#i';

+ global $config, $auth, $user, $phpbb_root_path, $phpEx;

+ include_once($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

+

+ var $page = array();

+ * Extract current session page

+ */

+ function extract_current_page($root_path)

+ {

+ $page_array = array();

+

+ // First of all, get the request uri...

+ $script_name = (!empty($_SERVER['PHP_SELF'])) ? $_SERVER['PHP_SELF'] : getenv('PHP_SELF');

+ $args = (!empty($_SERVER['QUERY_STRING'])) ? explode('&', $_SERVER['QUERY_STRING']) : explode('&', getenv('QUERY_STRING'));

+

+ // If we are unable to get the script name we use REQUEST_URI as a failover and note it within the page array for easier support...

+ if (!$script_name)

+ {

+ $script_name = (!empty($_SERVER['REQUEST_URI'])) ? $_SERVER['REQUEST_URI'] : getenv('REQUEST_URI');

+ $page['failover'] = 1;

+ }

+

+ // Replace backslashes and doubled slashes (could happen on some proxy setups)

+ $script_name = str_replace(array('\\', '//'), '/', $script_name);

+

+ // Now, remove the sid and let us get a clean query string...

+ foreach ($args as $key => $argument)

+ {

+ if (strpos($argument, 'sid=') === 0)

+ {

+ unset($args[$key]);

+ break;

+ }

+ }

+

+ // The current query string

+ $query_string = trim(implode('&', $args));

+

+ // basenamed page name (for example: index.php)

+ $page_name = htmlspecialchars(basename($script_name));

+

+ // current directory within the phpBB root (for example: adm)

+ $page_dir = substr(str_replace(str_replace('\\', '/', realpath($root_path)), '', str_replace('\\', '/', realpath('./'))), 1);

+

+ // Current page from phpBB root (for example: adm/index.php?i=10)

+ $page = (($page_dir) ? $page_dir . '/' : '') . $page_name . (($query_string) ? "?$query_string" : '');

+

+ // The script path from the webroot to the current directory (for example: /phpBB2/adm) : always prefixed with /

+ $script_path = trim(str_replace('\\', '/', dirname($script_name)));

+

+ // The script path from the webroot to the phpBB root (for example: /phpBB2)

+ $root_script_path = ($page_dir) ? str_replace('/' . $page_dir, '', $script_path) : $script_path;

+

+ // We are on the base level (phpBB root == webroot), lets adjust the variables a bit...

+ if (!$root_script_path)

+ {

+ $root_script_path = ($page_dir) ? str_replace($page_dir, '', $script_path) : $script_path;;

+ }

+

+ $page_array += array(

+ 'page_name' => $page_name,

+ 'page_dir' => $page_dir,

+

+ 'query_string' => $query_string,

+ 'script_path' => htmlspecialchars($script_path),

+ 'root_script_path' => htmlspecialchars($root_script_path),

+

+ 'page' => $page

+ );

+

+ return $page_array;

+ }

+

+ /**

+ global $phpEx, $SID, $db, $config, $phpbb_root_path;

+ $this->page = $this->extract_current_page($phpbb_root_path);

+ $this->page['page'] .= (isset($_POST['f'])) ? ((strpos($this->page['page'], '?') !== false) ? '&' : '?') . 'f=' . intval($_POST['f']) : '';

+ if ($this->time_now - $this->data['session_time'] > 60 || $this->data['session_page'] != $this->page['page'])

+ SET session_time = $this->time_now, session_page = '" . $db->sql_escape($this->page['page']) . "'

+ 'session_page' => (string) $this->page['page'],

+ if (strpos($this->page['page_query'], 'mode=reg_details') !== false && $this->page['page_name'] == "ucp.$phpEx")

+ redirect("ucp.$phpEx$SID&i=pm&mode=view&action=view_message" . (($msg_id) ? "&p=$msg_id" : ''));

+ redirect("ucp.$phpEx$SID&amp;i=pm&amp;mode=$mode");