General question about phpBB_Security

Support for IntegraMOD 140

Moderator: Integra Moderator

General question about phpBB_Security

PostAuthor: computerskillz » Thu Jun 29, 2006 9:10 pm

Does it secure custom forms and pages not included with the package but which are integrated and fall under the includes/page_header.php ?

In other words, I've created some custom pages and integrated them in the usual way using

--------------------------------
define('IN_PHPBB', true);
$phpbb_root_path = './';
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);
include($phpbb_root_path . 'includes/bbcode.'.$phpEx);
include($phpbb_root_path . 'includes/functions_post.'.$phpEx);

$userdata = session_pagestart($user_ip, PAGE_INDEX);
init_userprefs($userdata);

if( !$userdata['session_logged_in'] )
{
$message="You must login or register";
message_die(GENERAL_MESSAGE, $message);
}

include ($phpbb_root_path . 'includes/page_header.'.$phpEx);

blah blah blah etc...

my custom page here
------------------------

So my question is, does that put my custom page and all of its forms under the protection of phpbb_security?

Or does phpbb_security only secure the original package?
Last edited by computerskillz on Sat Jul 01, 2006 5:55 am, edited 1 time in total.
testing apostrophe''s in the singature''''s

computerskillz
Members
Members
 
Posts: 45
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 1:23 pm
Cash on hand: 0.00

Re: General question about phpBB_Security

PostAuthor: Dragonsys » Fri Jun 30, 2006 5:40 am

as far as I am aware, and form what I can tell looking at my site, anything which calls page_header falls under the Security.
Last edited by Dragonsys on Wed Dec 31, 1969 5:00 pm, edited 1 time in total.
Image
User avatar
Dragonsys
Sr Integra Member
Sr Integra Member
 
Posts: 326
Likes: 0 post
Liked in: 0 post
Joined: Mon Apr 10, 2006 7:45 am
Cash on hand: 0.00
Location: Springtown, TX

Re: General question about phpBB_Security

PostAuthor: computerskillz » Sat Jul 01, 2006 5:54 am

"Dragonsys";p="10565" wrote:as far as I am aware, and form what I can tell looking at my site, anything which calls page_header falls under the Security.


cool.. so then I don't have to worry about injects on my input forms

thats awesome!!
Last edited by computerskillz on Wed Dec 31, 1969 5:00 pm, edited 1 time in total.
testing apostrophe''s in the singature''''s

computerskillz
Members
Members
 
Posts: 45
Likes: 0 post
Liked in: 0 post
Joined: Thu May 18, 2006 1:23 pm
Cash on hand: 0.00


Return to IntegraMOD 140

Who is online

Registered users: App360MonitorBot, Bing [Bot], Google [Bot]