防止跨站

This commit is contained in:
joyqi 2014-02-28 10:09:42 +08:00
parent a54c3db00f
commit 6de401ab49
3 changed files with 5 additions and 6 deletions

View File

@ -4,7 +4,7 @@ include 'common.php';
if ($user->hasLogin()) {
$response->redirect($options->adminUrl);
}
$rememberName = Typecho_Cookie::get('__typecho_remember_name');
$rememberName = htmlspecialchars(Typecho_Cookie::get('__typecho_remember_name'));
Typecho_Cookie::delete('__typecho_remember_name');
$bodyClass = 'body-100';

View File

@ -4,8 +4,8 @@ include 'common.php';
if ($user->hasLogin() || !$options->allowRegister) {
$response->redirect($options->siteUrl);
}
$rememberName = Typecho_Cookie::get('__typecho_remember_name');
$rememberMail = Typecho_Cookie::get('__typecho_remember_mail');
$rememberName = htmlspecialchars(Typecho_Cookie::get('__typecho_remember_name'));
$rememberMail = htmlspecialchars(Typecho_Cookie::get('__typecho_remember_mail'));
Typecho_Cookie::delete('__typecho_remember_name');
Typecho_Cookie::delete('__typecho_remember_mail');

View File

@ -1754,14 +1754,14 @@ var TypechoComment = {
*
* @access public
* @param string $cookieName 已经记忆的cookie名称
* @param string $return 是否返回
* @param boolean $return 是否返回
* @return string
*/
public function remember($cookieName, $return = false)
{
$cookieName = strtolower($cookieName);
if (!in_array($cookieName, array('author', 'mail', 'url'))) {
return;
return '';
}
$value = Typecho_Cookie::get('__typecho_remember_' . $cookieName);
@ -1797,7 +1797,6 @@ var TypechoComment = {
* 输出关键字
*
* @access public
* @return unknown
*/
public function keywords($split = ',', $default = '')
{