unset($dbpasswd);

// worst-case default

$config = new phpbb_config_db($db, $cache->get_driver(), CONFIG_TABLE);

set_config(null, null, null, $config);

function base_extractor($download = false, $store = false, $format, $filename, $time)

{

$this->download = $download;

$this->store = $store;

$this->time = $time;

break;

case 'gzip':

{

ob_start('ob_gzhandler');

}

}

$this->flush($sql_data);

}

function write_data_mssqlnative($table_name)

{

global $db;

$row = new result_mssqlnative($result_fields);

$i_num_fields = $row->num_fields();

for ($i = 0; $i < $i_num_fields; $i++)

{

$ary_type[$i] = $row->field_type($i);

WHERE COLUMNPROPERTY(object_id('$table_name'), COLUMN_NAME, 'IsIdentity') = 1";

$result2 = $db->sql_query($sql);

$row2 = $db->sql_fetchrow($result2);

if (!empty($row2['has_identity']))

{

$sql_data .= "\nSET IDENTITY_INSERT $table_name ON\nGO\n";

$sql_data .= "\nSET IDENTITY_INSERT $table_name OFF\nGO\n";

}

$this->flush($sql_data);

function write_data_odbc($table_name)

{

global $db;

*/

function init_apache()

{

{

return $user->lang['APACHE_SETUP_BEFORE_USE'];

}

*/

function login_apache(&$username, &$password)

{

// do not allow empty password

if (!$password)

);

}

{

return array(

'status' => LOGIN_ERROR_EXTERNAL_AUTH,

);

}

if (!empty($php_auth_user) && !empty($php_auth_pw))

{

*/

function autologin_apache()

{

{

return array();

}

if (!empty($php_auth_user) && !empty($php_auth_pw))

{

*/

function validate_session_apache(&$user)

{

// Check if PHP_AUTH_USER is set and handle this case

{

return ($php_auth_user === $user['username']) ? true : false;

}

// PHP4 Constructor

function phpbb_recaptcha()

{

}

function init($type)

*/

function phpbb_own_realpath($path)

{

// Now to perform funky shizzle

// Switch to use UNIX slashes

$path_prefix = '';

}

}

{

// Warning: If chdir() has been used this will lie!

// Warning: This has some problems sometime (CLI can create them easily)

$absolute = true;

$path_prefix = '';

}

*/

function generate_board_url($without_script_path = false)

{

$server_name = $user->host;

// Forcing server vars is the only way to specify/override the protocol

if ($config['force_server_vars'] || !$server_name)

else

{

// Do not rely on cookie_secure, users seem to think that it means a secured cookie instead of an encrypted connection

$url = (($cookie_secure) ? 'https://' : 'http://') . $server_name;

$script_path = $user->page['root_script_path'];

*/

function send_status_line($code, $message)

{

if (substr(strtolower(@php_sapi_name()), 0, 3) === 'cgi')

{

// in theory, we shouldn't need that due to php doing it. Reality offers a differing opinion, though

}

else

{

{

}

{

// I cannot remember where I got this from.

// This code path may never be reachable in reality.

}

else

{

*/

function phpbb_http_login($param)

{

global $config;

$param_defaults = array(

$username = null;

foreach ($username_keys as $k)

{

{

break;

}

}

$password = null;

foreach ($password_keys as $k)

{

{

break;

}

}

*/

function header_filename($file)

{

// There be dragons here.

// Not many follows the RFC...

*/

function download_allowed()

{

if (!$config['secure_downloads'])

{

return true;

}

if (!$url)

{

*/

function set_modified_headers($stamp, $browser)

{

// let's see if we have to send the file at all

if ((strpos(strtolower($browser), 'msie 6.0') === false) && (strpos(strtolower($browser), 'msie 8.0') === false))

{

if ($last_load !== false && $last_load >= $stamp)

{

$request_array = phpbb_find_range_request();

}

return (empty($request_array)) ? false : phpbb_parse_range_request($request_array, $filesize);

}

/**

*

* @return mixed false if no request found

* array of strings containing the requested ranges otherwise

*/

function phpbb_find_range_request()

{

}

return false;

*/

function error($type, $msg)

{

// Session doesn't exist, create it

if (!isset($user->session_id) || $user->session_id === '')

$user->session_begin();

}

$message = '';

switch ($type)

*/

function get_data()

{

return array(

'os' => PHP_OS,

// we don't want the real IP address (for privacy policy reasons) but only

// a network address to see whether your installation is running on a private or public network.

'private_ip' => $this->is_private_ip($server_address),

}

}

$result['dbms'] = $dbms;

$result['acm_type'] = $acm_type;

// Try to get user agent vendor and version

$match = array();

$agents = array('firefox', 'msie', 'opera', 'chrome', 'safari', 'mozilla', 'seamonkey', 'konqueror', 'netscape', 'gecko', 'navigator', 'mosaic', 'lynx', 'amaya', 'omniweb', 'avant', 'camino', 'flock', 'aol');

// We check here 1 by 1 because some strings occur after others (for example Mozilla [...] Firefox/)

const GET = 1;

const REQUEST = 2;

const COOKIE = 3;

/**#@-*/

/**

* Default is false, causing all bytes outside the ASCII range (0-127) to be replaced with question marks

* @param phpbb_request_interface::POST|GET|REQUEST|COOKIE $super_global

* Specifies which super global should be used

*

* @return mixed The value of $_REQUEST[$var_name] run through {@link set_var set_var} to ensure that the type is the

* the same as that of $default. If the variable is not set $default is returned.

*/

/**

* Checks whether a certain variable was sent via POST.

public function is_set($var, $super_global = phpbb_request_interface::REQUEST);

/**

* Returns all variable names for a given super global

*

* @param phpbb_request_interface::POST|GET|REQUEST|COOKIE $super_global

phpbb_request_interface::POST => '_POST',

phpbb_request_interface::GET => '_GET',

phpbb_request_interface::REQUEST => '_REQUEST',

);

/**

* Default is false, causing all bytes outside the ASCII range (0-127) to be replaced with question marks

* @param phpbb_request_interface::POST|GET|REQUEST|COOKIE $super_global

* Specifies which super global should be used

*

* @return mixed The value of $_REQUEST[$var_name] run through {@link set_var set_var} to ensure that the type is the

* the same as that of $default. If the variable is not set $default is returned.

*/

{

$path = false;

}

}

return $var;

}

/**

* Checks whether a certain variable was sent via POST.

* To make sure that a request was sent using POST you should call this function

* on at least one variable.

}

/**

* Returns all variable names for a given super global

*

* @param phpbb_request_interface::POST|GET|REQUEST|COOKIE $super_global

/**

* Set variable $result to a particular type.

*

*/

{

settype($var, $type);

$result = $var;

if ($type == 'string')

{

if ($multibyte)

{

* @param bool $multibyte Indicates whether string keys and values may contain UTF-8 characters.

* Default is false, causing all bytes outside the ASCII range (0-127) to

* be replaced with question marks.

*/

{

if (is_array($var) !== is_array($default))

{

if (!is_array($default))

{

$type = gettype($default);

}

else

{

foreach ($_var as $k => $v)

{

$var[$k] = $v;

}

}

*/

static function extract_current_page($root_path)

{

$page_array = array();

// First of all, get the request uri...

// If we are unable to get the script name we use REQUEST_URI as a failover and note it within the page array for easier support...

if (!$script_name)

{

$script_name = (($pos = strpos($script_name, '?')) !== false) ? substr($script_name, 0, $pos) : $script_name;

$page_array['failover'] = 1;

}

*/

function extract_current_hostname()

{

// Get hostname

// Should be a string and lowered

$host = (string) strtolower($host);

$this->time_now = time();

$this->cookie_data = array('u' => 0, 'k' => '');

$this->update_session_page = $update_session_page;

$this->host = $this->extract_current_hostname();

$this->page = $this->extract_current_page($phpbb_root_path);

// Why no forwarded_for et al? Well, too easily spoofed. With the results of my recent requests

// it's pretty clear that in the majority of cases you'll at least be left with a proxy/cache ip.

$this->ip = preg_replace('# {2,}#', ' ', str_replace(',', ' ', $this->ip));

// split the list of IPs

$referer_valid = true;

// we assume HEAD and TRACE to be foul play and thus only whitelist GET

{

$referer_valid = $this->validate_referer($check_referer_path);

}

*/

function validate_referer($check_script_path = false)

{

// no referer - nothing to validate, user's fault for turning it off (we only check on POST; so meta can't be the reason)

if (empty($this->referer) || empty($this->host))

else if ($check_script_path && rtrim($this->page['root_script_path'], '/') !== '')

{

$ref = substr($ref, strlen($host));

if ($server_port !== 80 && $server_port !== 443 && stripos($ref, ":$server_port") === 0)

{

* If re-enabled we need to make sure only those languages installed are checked

* Commented out so we do not loose the code.

{

foreach ($accept_lang_ary as $accept_lang)

{

unset($dbpasswd);

$user->ip = '';

{

}

$sql = "SELECT config_value

// Try and load an appropriate language if required

$language = basename(request_var('language', ''));

{

foreach ($accept_lang_ary as $accept_lang)

{

// Set correct format ... guess full xx_yy form

*/

function redirect($page)

{

// HTTP_HOST is having the correct browser url in most cases...

if (!$script_name)

{

}

// Replace backslashes and doubled slashes (could happen on some proxy setups)

*/

function obtain_advanced_settings($mode, $sub)

{

$this->page_title = $lang['STAGE_ADVANCED'];

$s_hidden_fields .= '<input type="hidden" name="language" value="' . $data['language'] . '" />';

// HTTP_HOST is having the correct browser url in most cases...

// HTTP HOST can carry a port number...

if (strpos($server_name, ':') !== false)

$data['email_enable'] = ($data['email_enable'] !== '') ? $data['email_enable'] : true;

$data['server_name'] = ($data['server_name'] !== '') ? $data['server_name'] : $server_name;

if ($data['script_path'] === '')

{

if (!$name)

{

}

// Replace backslashes and doubled slashes (could happen on some proxy setups)

*/

function load_schema($mode, $sub)

{

$this->page_title = $lang['STAGE_CREATE_TABLE'];

$s_hidden_fields = '';

}

// HTTP_HOST is having the correct browser url in most cases...

// HTTP HOST can carry a port number...

if (strpos($server_name, ':') !== false)

$current_time = time();

if ($data['script_path'] !== '/')

{

if ($config['gzip_compress'])

{

// IE6 is not able to compress the style (do not ask us why!)

if ($browser && strpos($browser, 'msie 6.0') === false && @extension_loaded('zlib') && !headers_sent())

{

require_once dirname(__FILE__) . '/../../phpBB/includes/bbcode.php';

require_once dirname(__FILE__) . '/../../phpBB/includes/message_parser.php';

require_once dirname(__FILE__) . '/../mock_user.php';

class phpbb_url_bbcode_test extends phpbb_test_case

{

*/

public function test_url($description, $message, $expected)

{

$user = new phpbb_mock_user;

$bbcode = new bbcode_firstpass();

$bbcode->message = $message;

*/

require_once dirname(__FILE__) . '/../../phpBB/includes/functions_download.php';

class phpbb_download_http_byte_range_test extends phpbb_test_case

{

public function test_find_range_request()

{

// Missing 'bytes=' prefix

$this->assertEquals(false, phpbb_find_range_request());

$_ENV['HTTP_RANGE'] = 'bztes=';

$this->assertEquals(false, phpbb_find_range_request());

unset($_ENV['HTTP_RANGE']);

$this->assertEquals(array('0-0', '123-125'), phpbb_find_range_request());

}

/**

{

protected $data;

{

$this->data[phpbb_request_interface::GET] = $get;

$this->data[phpbb_request_interface::POST] = $post;

$this->data[phpbb_request_interface::COOKIE] = $cookie;

$this->data[phpbb_request_interface::REQUEST] = ($request === false) ? $post + $get : $request;

}

public function overwrite($var_name, $value, $super_global = phpbb_request_interface::REQUEST)

$this->data[$super_global][$var_name] = $value;

}

{

return isset($this->data[$super_global][$var_name]) ? $this->data[$super_global][$var_name] : $default;

}

public function is_set_post($name)

{

return $this->is_set($name, phpbb_request_interface::POST);

return isset($this->data[$super_global][$var]);

}

public function variable_names($super_global = phpbb_request_interface::REQUEST)

{

return array_keys($this->data[$super_global]);

}

}

$_GET['unset'] = '';

$this->type_cast_helper = $this->getMock('phpbb_request_type_cast_helper_interface');

$this->request = new phpbb_request($this->type_cast_helper);

}

$this->assertFalse($this->request->is_set_post('unset'));

}

public function test_variable_names()

{

$expected = array('test', 'unset');

$this->assertEquals($expected, $data);

}

}

*

*/

abstract class phpbb_security_test_base extends phpbb_test_case

{

/**

*/

protected function setUp()

{

// Put this into a global function being run by every test to init a proper user session

/*

[HTTP_ACCEPT_ENCODING] => gzip,deflate

[SCRIPT_FILENAME] => /var/www/tests/index.php

*/

// Set no user and trick a bit to circumvent errors

$user = new user();

$user->lang = true;

$user->page = session::extract_current_page($phpbb_root_path);

}

*/

public function test_query_string_php_self($url, $query_string, $expected)

{

$result = session::extract_current_page('./');

*/

public function test_query_string_request_uri($url, $query_string, $expected)

{

$result = session::extract_current_page('./');