123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131 |
- <?php
- if ( ini_get( 'register_globals' ) ) {
- if ( isset( $_REQUEST['GLOBALS'] ) ) {
- die( '<a href="http://www.hardened-php.net/index.76.html">$GLOBALS overwrite vulnerability</a>');
- }
- $verboten = array(
- 'GLOBALS',
- '_SERVER',
- 'HTTP_SERVER_VARS',
- '_GET',
- 'HTTP_GET_VARS',
- '_POST',
- 'HTTP_POST_VARS',
- '_COOKIE',
- 'HTTP_COOKIE_VARS',
- '_FILES',
- 'HTTP_POST_FILES',
- '_ENV',
- 'HTTP_ENV_VARS',
- '_REQUEST',
- '_SESSION',
- 'HTTP_SESSION_VARS'
- );
- foreach ( $_REQUEST as $name => $value ) {
- if( in_array( $name, $verboten ) ) {
- header( "HTTP/1.x 500 Internal Server Error" );
- echo "register_globals security paranoia: trying to overwrite superglobals, aborting.";
- die( -1 );
- }
- unset( $GLOBALS[$name] );
- }
- }
- $wgRequestTime = microtime(true);
- if ( function_exists ( 'getrusage' ) ) {
- $wgRUstart = getrusage();
- } else {
- $wgRUstart = array();
- }
- unset( $IP );
- @ini_set( 'allow_url_fopen', 0 );
- define( 'MEDIAWIKI', true );
- $IP = getenv( 'MW_INSTALL_PATH' );
- if ( $IP === false ) {
- $IP = realpath( '.' );
- }
- require_once( "$IP/StartProfiler.php" );
- wfProfileIn( 'WebStart.php-conf' );
- require_once( "$IP/includes/Defines.php" );
- if ( !function_exists( 'version_compare' )
- || version_compare( phpversion(), '5.0.0' ) < 0
- ) {
- define( 'MW_PHP4', '1' );
- require( "$IP/includes/DefaultSettings.php" );
- require( "$IP/includes/templates/PHP4.php" );
- exit;
- }
- $borked = str_replace( 'a', 'b', array( -1 => -1 ) );
- if( !isset( $borked[-1] ) ) {
- echo "PHP 5.0.x is buggy on your 64-bit system; you must upgrade to PHP 5.1.x\n" .
- "or higher. ABORTING. (http://bugs.php.net/bug.php?id=34879 for details)\n";
- exit;
- }
- require_once( "$IP/includes/AutoLoader.php" );
- if ( defined( 'MW_CONFIG_CALLBACK' ) ) {
-
- require_once( "$IP/includes/DefaultSettings.php" );
- call_user_func( MW_CONFIG_CALLBACK );
- } else {
-
-
-
- if( !file_exists( "$IP/LocalSettings.php" ) ) {
- require_once( "$IP/includes/DefaultSettings.php" );
- require_once( "$IP/includes/templates/NoLocalSettings.php" );
- die();
- }
-
- require_once( "$IP/LocalSettings.php" );
- }
- wfProfileOut( 'WebStart.php-conf' );
- wfProfileIn( 'WebStart.php-ob_start' );
- if ( ob_get_level() ) {
-
-
- } elseif ( !defined( 'MW_NO_OUTPUT_BUFFER' ) ) {
- require_once( "$IP/includes/OutputHandler.php" );
- ob_start( 'wfOutputHandler' );
- }
- wfProfileOut( 'WebStart.php-ob_start' );
- if ( !defined( 'MW_NO_SETUP' ) ) {
- require_once( "$IP/includes/Setup.php" );
- }
|