5
Mowaffak as reported same bug but I could not reproduce it on my sites.
in banners.php line 310 this check is failing:
le="color: #000000"><?php if ($GLOBALS['xoopsSecurity']->checkReferer()) {
which leads to class/xoopssecurity.php:
le="color: #000000"><?php function checkReferer($docheck = 1) { $ref = xoops_getenv('HTTP_REFERER'); if ($docheck == 0) { return true; } if ($ref == '') { return false; } if (strpos($ref, XOOPS_URL) !== 0) { return false; } return true; }
which leads to include/functions.php
le="color: #000000"><?php function xoops_getenv($key) { $ret = ''; if (array_key_exists($key, $_SERVER) && isset($_SERVER[$key])) { $ret = $_SERVER[$key]; return $ret; } if (array_key_exists($key, $_ENV) && isset($_ENV[$key])) { $ret = $_ENV[$key]; return $ret; } return $ret; }
Can anyone see where the bug might be?
