mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-03-14 01:19:44 +01:00
Code Issues Releases Wiki Activity

Php Info styling

Browse Source
This commit is contained in:
Cameron 2013-02-28 14:27:01 -08:00
parent 06164b5cc9
commit 63e393bdd0
1 changed files with 37 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
e107_admin/phpinfo.php
View File

@ -16,17 +16,50 @@
require_once("../class2.php");
if (!getperms("0")) {
header("location:".e_BASE."index.php");
exit;
header("location:".e_BASE."index.php");
exit;
}
$e_sub_cat = 'phpinfo';
require_once("auth.php");
ob_start();
phpinfo();
$phpinfo .= ob_get_contents();
$phpinfo = preg_replace("#^.*<body>#is", "", $phpinfo);
$phpinfo = str_replace("font","span",$phpinfo);
$phpinfo = str_replace("</body></html>","",$phpinfo);
$phpinfo = str_replace('border="0"','',$phpinfo);
$phpinfo = str_replace('<table ','<table class="table table-striped adminlist" ',$phpinfo);
$phpinfo = str_replace('name=','id=',$phpinfo);
$phpinfo = str_replace('class="e"','class="forumheader2"',$phpinfo);
$phpinfo = str_replace('class="v"','class="forumheader3"',$phpinfo);
$phpinfo = str_replace('class="v"','class="forumheader3"',$phpinfo);
$phpinfo = str_replace('class="h"','class="fcaption"',$phpinfo);
$mes = e107::getMessage();
$security_risks = array(
"allow_url_fopen" => 'If you have Curl enabled, you should consider disabling this feature.',
"allow_url_include" => 'This is a security risk and is not needed by e107.',
"display_errors" => 'On a production server, it is better to disable the displaying of errors in the browser.',
"expose_php" => 'Disabling this will hide your PHP version from browsers.',
"register_globals" => 'This is a security risk and should be disabled.'
);
foreach($security_risks as $risk=>$diz)
{
if(ini_get($risk))
{
$srch = '<tr><td class="forumheader2">'.$risk.'</td><td class="forumheader3">';
$repl = '<tr><td class="forumheader2">'.$risk.'</td><td title="'.$tp->toAttribute($diz).'" class="forumheader3" style="background-color:red">';
$phpinfo = str_replace($srch,$repl,$phpinfo);
$mes->addWarning("<b>".$risk."</b>: ".$diz);
}
}
// $phpinfo = preg_replace("#^.*<body>#is", "", $phpinfo);
ob_end_clean();
$ns->tablerender("PHPInfo", $phpinfo);
$ns->tablerender("PHPInfo", $mes->render(). $phpinfo);
require_once("footer.php");
?>