richard
/
sorbetcms
1
0
Fork 1
Code Issues Pull Requests Releases Wiki Activity

* Sanitize data entries for install gelato 

* Removed some warnings
master
Victor De la Rocha 2008-10-24 21:52:00 +00:00
parent 071d50e367
commit 25f1c98695
2 changed files with 9 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
classes/install.class.php
View File

@ -120,14 +120,13 @@ class Install {
PRIMARY KEY (`id_feed`) PRIMARY KEY (`id_feed`)
) ENGINE=MyISAM ;"; ) ENGINE=MyISAM ;";
$sqlStr[] = "INSERT INTO `".Table_prefix."config` VALUES (". $db->sql_escape($this->data['posts_limit']).", '".$db->sql_escape($this->data['title'])."', '".$db->sql_escape($this->data['description'])."', '".$db->sql_escape($this->data['lang'])."', '".$db->sql_escape($this->data['template'])."', '".$db->sql_escape($this->data['url_installation'])."');";
$sqlStr[] = "INSERT INTO `".Table_prefix."config` VALUES (". $this->data['posts_limit'] .", '".$this->data['title']."', '".$this->data['description']."', '".$this->data['lang']."', '".$this->data['template']."', '".$this->data['url_installation']."');"; $sqlStr[] = "INSERT INTO `".Table_prefix."users` VALUES ('', '', '".$db->sql_escape($this->data['login'])."', '".md5($this->data['password'])."', '".$db->sql_escape($this->data['email'])."', '".$db->sql_escape($this->data['website'])."', '".$db->sql_escape($this->data['about'])."');";
$sqlStr[] = "INSERT INTO `".Table_prefix."users` VALUES ('', '', '".$this->data['login']."', '".md5($this->data['password'])."', '".$this->data['email']."', '".$this->data['website']."', '".$this->data['about']."');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('url_friendly', '0');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('url_friendly', '0');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('rich_text', '0');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('rich_text', '0');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('allow_comments', '0');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('allow_comments', '0');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('offset_city', '".$this->data['offset_city']."');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('offset_city', '".$db->sql_escape($this->data['offset_city'])."');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('offset_time', '".$this->data['offset_time']."');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('offset_time', '".$db->sql_escape($this->data['offset_time'])."');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('shorten_links', '0');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('shorten_links', '0');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('rss_import_frec', '5 minutes');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('rss_import_frec', '5 minutes');";
$sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('check_version', '1');"; $sqlStr[] = "INSERT INTO `".Table_prefix."options` VALUES ('check_version', '1');";

10
install.php
View File

@ -63,7 +63,7 @@ $install->check_form();
<legend class="install">Database Settings</legend> <legend class="install">Database Settings</legend>
<ul> <ul>
<li><label for="login">User:</label> <li><label for="login">User:</label>
<input type="text" name="db_login" id="db_login" value="<?php echo $install->data['db_login']?>" class="txt"/><?php echo $install->mostrarerror("10")?></li> <input type="text" name="db_login" id="db_login" value="<?php echo isset($install->data['db_login'])?$install->data['db_login']:''?>" class="txt"/><?php echo $install->mostrarerror("10")?></li>
<li><label for="password">Password:</label> <li><label for="password">Password:</label>
<input type="password" name="db_password" id="db_password" value="" class="txt"/></li> <input type="password" name="db_password" id="db_password" value="" class="txt"/></li>
<li><label for="password2">Re-type password:</label> <li><label for="password2">Re-type password:</label>
@ -78,22 +78,22 @@ $install->check_form();
<legend class="install">Admin user</legend> <legend class="install">Admin user</legend>
<ul> <ul>
<li><label for="login">User:</label> <li><label for="login">User:</label>
<input type="text" name="login" id="login" value="<?php echo $install->data['login']?>" class="txt"/><?php echo $install->mostrarerror("1")?></li> <input type="text" name="login" id="login" value="<?php echo isset($install->data['login'])?$install->data['login']:''?>" class="txt"/><?php echo $install->mostrarerror("1")?></li>
<li><label for="password">Password:</label> <li><label for="password">Password:</label>
<input type="password" name="password" id="password" value="" class="txt"/><?php echo $install->mostrarerror("2")?></li> <input type="password" name="password" id="password" value="" class="txt"/><?php echo $install->mostrarerror("2")?></li>
<li><label for="password2">Re-type password:</label> <li><label for="password2">Re-type password:</label>
<input type="password" name="password2" id="password2" value="" class="txt"/><?php echo $install->mostrarerror("3")?></li> <input type="password" name="password2" id="password2" value="" class="txt"/><?php echo $install->mostrarerror("3")?></li>
<li><label for="email">E-mail:</label> <li><label for="email">E-mail:</label>
<input type="text" name="email" id="email" value="<?php echo $install->data['email']?>" class="txt"/><?php echo $install->mostrarerror("4")?></li> <input type="text" name="email" id="email" value="<?php echo isset($install->data['email'])?$install->data['email']:''?>" class="txt"/><?php echo $install->mostrarerror("4")?></li>
</ul> </ul>
</fieldset><br /> </fieldset><br />
<fieldset class="install"> <fieldset class="install">
<legend class="install">Tumblelog configuration</legend> <legend class="install">Tumblelog configuration</legend>
<ul> <ul>
<li><label for="title">Title:</label> <li><label for="title">Title:</label>
<input type="text" name="title" id="title" value="<?php echo $install->data['title']?>" class="txt"/></li> <input type="text" name="title" id="title" value="<?php echo isset($install->data['title'])?$install->data['title']:''?>" class="txt"/></li>
<li><label for="description">Description:</label> <li><label for="description">Description:</label>
<input type="text" name="description" id="description" value="<?php echo $install->data['description']?>" class="txt"/></li> <input type="text" name="description" id="description" value="<?php echo isset($install->data['description'])?$install->data['description']:''?>" class="txt"/></li>
<li><label for="url_installation">Installation URL</label> <li><label for="url_installation">Installation URL</label>
<input type="text" name="url_installation" id="url_installation" value="<?php if(isset($_SERVER['SCRIPT_URI']))echo substr($_SERVER["SCRIPT_URI"], '0', '-12'); ?>" class="txt"/><?php echo $install->mostrarerror("5")?></li> <input type="text" name="url_installation" id="url_installation" value="<?php if(isset($_SERVER['SCRIPT_URI']))echo substr($_SERVER["SCRIPT_URI"], '0', '-12'); ?>" class="txt"/><?php echo $install->mostrarerror("5")?></li>
<li><label for="posts_limit">Post limit:</label> <li><label for="posts_limit">Post limit:</label>