5
Mowaffak as reported same bug but I could not reproduce it on my sites.
in banners.php line 310 this check is failing:
if ($GLOBALS['xoopsSecurity']->checkReferer()) {
which leads to class/xoopssecurity.php:
function checkReferer($docheck = 1)
{
$ref = xoops_getenv('HTTP_REFERER');
if ($docheck == 0) {
return true;
}
if ($ref == '') {
return false;
}
if (strpos($ref, XOOPS_URL) !== 0) {
return false;
}
return true;
}
which leads to include/functions.php
function xoops_getenv($key)
{
$ret = '';
if (array_key_exists($key, $_SERVER) && isset($_SERVER[$key])) {
$ret = $_SERVER[$key];
return $ret;
}
if (array_key_exists($key, $_ENV) && isset($_ENV[$key])) {
$ret = $_ENV[$key];
return $ret;
}
return $ret;
}
Can anyone see where the bug might be?
