vbulletin 4.1.11 - дыра ли?

27.07.2012, 04:46

Pirotexnik

Guest

Сообщений: n/a

Провел на форуме:
97332

Репутация: 38

Всем доброго времени суток.

Ковырял я булку. Но булку сделали такой, что ковырять ее с неокрепшей психокой опасно. Что со мной и произошло.

Вобщем, я ещё не уверен, что это баг, но мне так очень кажется.

Дело вот в чем:

Есть такой код.

PHP код:


		
			
PHP:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]eval([/COLOR][COLOR="#0000BB"]standard_error[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]fetch_error[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'forumpasswordincorrect'[/COLOR][COLOR="#007700"],

[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]session[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]vars[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'sessionhash'[/COLOR][COLOR="#007700"]],

[/COLOR][COLOR="#0000BB"]htmlspecialchars_uni[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]GPC[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'url'[/COLOR][COLOR="#007700"]]),

[/COLOR][COLOR="#0000BB"]$foruminfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'forumid'[/COLOR][COLOR="#007700"]],

[/COLOR][COLOR="#0000BB"]$postvars[/COLOR][COLOR="#007700"],

[/COLOR][COLOR="#0000BB"]10[/COLOR][COLOR="#007700"],

[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"],

[/COLOR][COLOR="#0000BB"]$forumlink

[/COLOR][COLOR="#007700"])));[/COLOR][/COLOR]

функция fetch_error() возвращает ТЕКСТ.

Что возвращает функция standart_error() я не разобрался, и прошу помочь разобратся. Но темнемение, это что-то выполняется eval-ом. Что интересно. Ниже код обеих функций. НО! Есть ещё вет что.

PHP код:


		
			
PHP:
[COLOR="#000000"][COLOR="#0000BB"]204[/COLOR][COLOR="#007700"]:[/COLOR][COLOR="#0000BB"]$postvars[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]construct_post_vars_html[/COLOR][COLOR="#007700"]() .[/COLOR][COLOR="#DD0000"]'[/COLOR][COLOR="#0000BB"]userinfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'securitytoken'[/COLOR][COLOR="#007700"]] .[/COLOR][COLOR="#DD0000"]'" />'[/COLOR][COLOR="#007700"];[/COLOR][/COLOR]

Тоесть переменная postvars содержат какой никакой, но инпут.

P.S. если я написал бред - не пинайте, достаточно объяснить почему бред

PHP код:


		
			
PHP:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]function[/COLOR][COLOR="#0000BB"]fetch_error[/COLOR][COLOR="#007700"]()  

 {  

         global[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"];  

   

[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]func_get_args[/COLOR][COLOR="#007700"]();  

   

[/COLOR][COLOR="#FF8000"]// Allow an array of phrase and variables to be passed in as arg0 (for some internal functions)  

[/COLOR][COLOR="#007700"]if ([/COLOR][COLOR="#0000BB"]is_array[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]]))  

         {  

[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]];  

         }  

   

         if ([/COLOR][COLOR="#0000BB"]class_exists[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'vBulletinHook'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"]))  

         {  

                 ([/COLOR][COLOR="#0000BB"]$hook[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]vBulletinHook[/COLOR][COLOR="#007700"]::[/COLOR][COLOR="#0000BB"]fetch_hook[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'error_fetch'[/COLOR][COLOR="#007700"])) ? eval([/COLOR][COLOR="#0000BB"]$hook[/COLOR][COLOR="#007700"]) :[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];  

         }  

   

         if (![/COLOR][COLOR="#0000BB"]function_exists[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'fetch_phrase'[/COLOR][COLOR="#007700"]) AND ![/COLOR][COLOR="#0000BB"]VB_API[/COLOR][COLOR="#007700"])  

         {  

                 require_once([/COLOR][COLOR="#0000BB"]DIR[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'/includes/functions_misc.php'[/COLOR][COLOR="#007700"]);  

         }  

   

         if ([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]GPC[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'ajax'[/COLOR][COLOR="#007700"]])  

         {  

                 switch ([/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]])  

                 {  

                         case[/COLOR][COLOR="#DD0000"]'invalidid'[/COLOR][COLOR="#007700"]:  

                         case[/COLOR][COLOR="#DD0000"]'nopermission_loggedin'[/COLOR][COLOR="#007700"]:  

                         case[/COLOR][COLOR="#DD0000"]'forumpasswordmissing'[/COLOR][COLOR="#007700"]:  

[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]] .[/COLOR][COLOR="#DD0000"]'_ajax'[/COLOR][COLOR="#007700"];  

                 }  

         }  

   

[/COLOR][COLOR="#FF8000"]// API only needs error phrase name and args.  

[/COLOR][COLOR="#007700"]if ([/COLOR][COLOR="#0000BB"]defined[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'VB_API'[/COLOR][COLOR="#007700"]) AND[/COLOR][COLOR="#0000BB"]VB_API[/COLOR][COLOR="#007700"]===[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"])  

         {  

                 return[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"];  

         }  

   

[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]fetch_phrase[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]],[/COLOR][COLOR="#DD0000"]'error'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"]);  

         if ([/COLOR][COLOR="#0000BB"]sizeof[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"]) >[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"])  

         {  

                 return[/COLOR][COLOR="#0000BB"]call_user_func_array[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'construct_phrase'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"]);  

         }  

         else  

         {  

                 return[/COLOR][COLOR="#0000BB"]$args[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#0000BB"]0[/COLOR][COLOR="#007700"]];  

         }  

 }[/COLOR][/COLOR]

PHP код:


		
			
PHP:
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]function[/COLOR][COLOR="#0000BB"]standard_error[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$error[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$headinsert[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$savebadlocation[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$override_template[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"])  

 {  

         global[/COLOR][COLOR="#0000BB"]$header[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$footer[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$headinclude[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$forumjump[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$timezone[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$gobutton[/COLOR][COLOR="#007700"];  

         global[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$vbphrase[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$template_hook[/COLOR][COLOR="#007700"];  

         global[/COLOR][COLOR="#0000BB"]$pmbox[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$show[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$ad_location[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$notifications_menubits[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$notifications_total[/COLOR][COLOR="#007700"];  

   

[/COLOR][COLOR="#0000BB"]$show[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'notices'[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];  

   

[/COLOR][COLOR="#0000BB"]construct_quick_nav[/COLOR][COLOR="#007700"](array(), -[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"]);  

   

[/COLOR][COLOR="#0000BB"]$title[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'bbtitle'[/COLOR][COLOR="#007700"]];  

[/COLOR][COLOR="#0000BB"]$pagetitle[/COLOR][COLOR="#007700"]=&[/COLOR][COLOR="#0000BB"]$title[/COLOR][COLOR="#007700"];  

[/COLOR][COLOR="#0000BB"]$errormessage[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$error[/COLOR][COLOR="#007700"];  

   

         if (![/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]userinfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'badlocation'[/COLOR][COLOR="#007700"]] AND[/COLOR][COLOR="#0000BB"]$savebadlocation[/COLOR][COLOR="#007700"])  

         {  

[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]userinfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'badlocation'[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]3[/COLOR][COLOR="#007700"];  

         }  

         require_once([/COLOR][COLOR="#0000BB"]DIR[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'/includes/functions_misc.php'[/COLOR][COLOR="#007700"]);  

         if ([/COLOR][COLOR="#0000BB"]$_POST[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'securitytoken'[/COLOR][COLOR="#007700"]] OR[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]GPC[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'postvars'[/COLOR][COLOR="#007700"]])  

         {  

[/COLOR][COLOR="#0000BB"]$postvars[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]construct_post_vars_html[/COLOR][COLOR="#007700"]();  

                 if ([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]GPC[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'postvars'[/COLOR][COLOR="#007700"]])  

                 {  

[/COLOR][COLOR="#0000BB"]$_postvars[/COLOR][COLOR="#007700"]= @[/COLOR][COLOR="#0000BB"]unserialize[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]verify_client_string[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]GPC[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'postvars'[/COLOR][COLOR="#007700"]]));  

                         if ([/COLOR][COLOR="#0000BB"]$_postvars[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'securitytoken'[/COLOR][COLOR="#007700"]] ==[/COLOR][COLOR="#DD0000"]'guest'[/COLOR][COLOR="#007700"])  

                         {  

                                 unset([/COLOR][COLOR="#0000BB"]$_postvars[/COLOR][COLOR="#007700"]);  

                         }  

                 }  

                 else if ([/COLOR][COLOR="#0000BB"]$_POST[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'securitytoken'[/COLOR][COLOR="#007700"]] ==[/COLOR][COLOR="#DD0000"]'guest'[/COLOR][COLOR="#007700"])  

                 {  

                         unset([/COLOR][COLOR="#0000BB"]$postvars[/COLOR][COLOR="#007700"]);  

                 }  

         }  

         else  

         {  

[/COLOR][COLOR="#0000BB"]$postvars[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"];  

         }  

   

         if ([/COLOR][COLOR="#0000BB"]defined[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'VB_ERROR_PERMISSION'[/COLOR][COLOR="#007700"]) AND[/COLOR][COLOR="#0000BB"]VB_ERROR_PERMISSION[/COLOR][COLOR="#007700"]==[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"])  

         {  

[/COLOR][COLOR="#0000BB"]$show[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'permission_error'[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"];  

         }  

         else  

         {  

[/COLOR][COLOR="#0000BB"]$show[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'permission_error'[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];  

         }  

   

[/COLOR][COLOR="#0000BB"]$show[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'search_noindex'[/COLOR][COLOR="#007700"]] = (bool)([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]userinfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'permissions'[/COLOR][COLOR="#007700"]][[/COLOR][COLOR="#DD0000"]'forumpermissions'[/COLOR][COLOR="#007700"]] &[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]bf_ugp_forumpermissions[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'canview'[/COLOR][COLOR="#007700"]]);  

   

[/COLOR][COLOR="#0000BB"]$navbar[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"];  

[/COLOR][COLOR="#0000BB"]$navbits[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]construct_navbits[/COLOR][COLOR="#007700"](array([/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"]=>[/COLOR][COLOR="#0000BB"]$vbphrase[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'vbulletin_message'[/COLOR][COLOR="#007700"]]));  

   

         if ([/COLOR][COLOR="#0000BB"]defined[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'VB_ERROR_LITE'[/COLOR][COLOR="#007700"]) AND[/COLOR][COLOR="#0000BB"]VB_ERROR_LITE[/COLOR][COLOR="#007700"]==[/COLOR][COLOR="#0000BB"]true[/COLOR][COLOR="#007700"])  

         {  

[/COLOR][COLOR="#0000BB"]$templatename[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#DD0000"]'STANDARD_ERROR_LITE'[/COLOR][COLOR="#007700"];  

[/COLOR][COLOR="#0000BB"]define[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'NOPMPOPUP'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]1[/COLOR][COLOR="#007700"]);[/COLOR][COLOR="#FF8000"]// No Footer here  

[/COLOR][COLOR="#007700"]}  

         else  

         {  

[/COLOR][COLOR="#0000BB"]$templatename[/COLOR][COLOR="#007700"]= ([/COLOR][COLOR="#0000BB"]$override_template[/COLOR][COLOR="#007700"]?[/COLOR][COLOR="#0000BB"]preg_replace[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'#[^a-z0-9_]#i'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$override_template[/COLOR][COLOR="#007700"]) :[/COLOR][COLOR="#DD0000"]'STANDARD_ERROR'[/COLOR][COLOR="#007700"]);  

         }  

   

[/COLOR][COLOR="#0000BB"]$show[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'dst_correction'[/COLOR][COLOR="#007700"]] =[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];  

   

         ([/COLOR][COLOR="#0000BB"]$hook[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]vBulletinHook[/COLOR][COLOR="#007700"]::[/COLOR][COLOR="#0000BB"]fetch_hook[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'error_generic'[/COLOR][COLOR="#007700"])) ? eval([/COLOR][COLOR="#0000BB"]$hook[/COLOR][COLOR="#007700"]) :[/COLOR][COLOR="#0000BB"]false[/COLOR][COLOR="#007700"];  

   

[/COLOR][COLOR="#FF8000"]// VBIV-4792 always render navbar (also fixes VBIV-11560).  

[/COLOR][COLOR="#0000BB"]$navbar[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]render_navbar_template[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$navbits[/COLOR][COLOR="#007700"]);  

   

         if ([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]GPC[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'ajax'[/COLOR][COLOR="#007700"]])  

         {  

                 require_once([/COLOR][COLOR="#0000BB"]DIR[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'/includes/class_xml.php'[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$xml[/COLOR][COLOR="#007700"]= new[/COLOR][COLOR="#0000BB"]vB_AJAX_XML_Builder[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#DD0000"]'text/xml'[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$xml[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]add_tag[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'error'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$errormessage[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$xml[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]print_xml[/COLOR][COLOR="#007700"]();  

                 exit;  

         }  

         else  

         {  

                 if ([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]noheader[/COLOR][COLOR="#007700"])  

                 {  

                         @[/COLOR][COLOR="#0000BB"]header[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'Content-Type: text/html'[/COLOR][COLOR="#007700"]. ([/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]userinfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'lang_charset'[/COLOR][COLOR="#007700"]] !=[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"]?[/COLOR][COLOR="#DD0000"]'; charset='[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]userinfo[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'lang_charset'[/COLOR][COLOR="#007700"]] :[/COLOR][COLOR="#DD0000"]''[/COLOR][COLOR="#007700"]));  

                 }  

   

[/COLOR][COLOR="#0000BB"]$redirpath[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]SCRIPTPATH[/COLOR][COLOR="#007700"];  

[/COLOR][COLOR="#0000BB"]$pathinfo[/COLOR][COLOR="#007700"]= @[/COLOR][COLOR="#0000BB"]parse_url[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$VB_URL[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$options[/COLOR][COLOR="#007700"]= array(  

[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'vbforum_url'[/COLOR][COLOR="#007700"]],  

[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'vbblog_url'[/COLOR][COLOR="#007700"]],  

[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]options[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'vbcms_url'[/COLOR][COLOR="#007700"]],  

                 );  

                 foreach([/COLOR][COLOR="#0000BB"]$options[/COLOR][COLOR="#007700"]AS[/COLOR][COLOR="#0000BB"]$value[/COLOR][COLOR="#007700"])  

                 {  

                         if ([/COLOR][COLOR="#0000BB"]$value[/COLOR][COLOR="#007700"]AND[/COLOR][COLOR="#0000BB"]$info[/COLOR][COLOR="#007700"]= @[/COLOR][COLOR="#0000BB"]parse_url[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$value[/COLOR][COLOR="#007700"]))  

                         {  

                                 if ([/COLOR][COLOR="#DD0000"]"[/COLOR][COLOR="#007700"]{[/COLOR][COLOR="#0000BB"]$info[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'scheme'[/COLOR][COLOR="#007700"]]}[/COLOR][COLOR="#DD0000"]://[/COLOR][COLOR="#007700"]{[/COLOR][COLOR="#0000BB"]$info[/COLOR][COLOR="#007700"][[/COLOR][COLOR="#DD0000"]'host'[/COLOR][COLOR="#007700"]]}[/COLOR][COLOR="#DD0000"]"[/COLOR][COLOR="#007700"]==[/COLOR][COLOR="#0000BB"]VB_URL_SCHEME[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#DD0000"]'://'[/COLOR][COLOR="#007700"].[/COLOR][COLOR="#0000BB"]VB_URL_HOST[/COLOR][COLOR="#007700"])  

                                 {  

[/COLOR][COLOR="#0000BB"]$redirpath[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]input[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]xss_clean[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]VB_URL[/COLOR][COLOR="#007700"]);  

                                         break;  

                                 }  

                         }  

                 }  

                   

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]=[/COLOR][COLOR="#0000BB"]vB_Template[/COLOR][COLOR="#007700"]::[/COLOR][COLOR="#0000BB"]create[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$templatename[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register_page_templates[/COLOR][COLOR="#007700"]();  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'errormessage'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$errormessage[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'forumjump'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$forumjump[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'headinsert'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$headinsert[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'navbar'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$navbar[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'pagetitle'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$pagetitle[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'postvars'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$postvars[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'scriptpath'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$redirpath[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]register[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#DD0000"]'url'[/COLOR][COLOR="#007700"],[/COLOR][COLOR="#0000BB"]$vbulletin[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]url[/COLOR][COLOR="#007700"]);  

[/COLOR][COLOR="#0000BB"]print_output[/COLOR][COLOR="#007700"]([/COLOR][COLOR="#0000BB"]$templater[/COLOR][COLOR="#007700"]->[/COLOR][COLOR="#0000BB"]render[/COLOR][COLOR="#007700"]());  

         }  

 }[/COLOR][/COLOR]

ANTICHAT — форум по информационной безопасности, OSINT и технологиям