else
$parms[$name] = @htmlspecialchars($value, ENT_QUOTES, $_SESSION['language']->encoding);
}
+ reset($parms); // needed for direct key() usage later throughout the sources
}
//============================================================================
$_SESSION['language']->set_language($_SESSION['language']->code);
-// include $Hooks object if locale file exists
+include_once($path_to_root . "/includes/hooks.inc");
+
+$Hooks = array();
+// include current langauge related $Hooks object if locale file exists
if (file_exists($path_to_root . "/lang/".$_SESSION['language']->code."/locale.inc"))
{
include_once($path_to_root . "/lang/".$_SESSION['language']->code."/locale.inc");
- $Hooks = new Hooks();
+ $Hooks[] = new Hooks();
}
include_once($path_to_root . "/includes/access_levels.inc");
if (!isset($_SESSION["wa_current_user"]))
$_SESSION["wa_current_user"] = new current_user();
+html_cleanup($_GET);
+html_cleanup($_POST);
+html_cleanup($_REQUEST);
+
// logout.php is the only page we should have always
// accessable regardless of access level and current login status.
if (strstr($_SERVER['PHP_SELF'], 'logout.php') == false){
{
// strip ajax marker from uri, to force synchronous page reload
$_SESSION['timeout'] = array( 'uri'=>preg_replace('/JsHttpRequest=(?:(\d+)-)?([^&]+)/s',
- '', @$_SERVER['REQUEST_URI']),
+ '', @htmlspecialchars($_SERVER['REQUEST_URI'], ENT_QUOTES, $_SESSION['language']->encoding)),
'post' => $_POST);
include($path_to_root . "/access/login.php");
// We quote all values later with db_escape() before db update.
$_POST = strip_quotes($_POST);
-html_cleanup($_GET);
-html_cleanup($_POST);
?>
\ No newline at end of file