function smarty_core_is_secure in Quiz 6.6

Same name and namespace in other branches

1. 6.5 includes/moodle/lib/smarty/core/core.is_secure.php \smarty_core_is_secure()

3 calls to smarty_core_is_secure()

Smarty::_fetch_resource_info in includes/moodle/lib/smarty/Smarty.class.php

fetch the template info. Gets timestamp, and source if get_source is true

smarty_function_fetch in includes/moodle/lib/smarty/plugins/function.fetch.php

Smarty {fetch} plugin

smarty_function_html_image in includes/moodle/lib/smarty/plugins/function.html_image.php

Smarty {html_image} function plugin

File

includes/moodle/lib/smarty/core/core.is_secure.php, line 18

Code

function smarty_core_is_secure($params, &$smarty) {
  static $check_template_dir = true;
  if (!$smarty->security || $smarty->security_settings['INCLUDE_ANY']) {
    return true;
  }
  $_smarty_secure = false;
  if ($params['resource_type'] == 'file') {
    if ($check_template_dir) {
      if (!in_array($smarty->template_dir, $smarty->secure_dir)) {

        // add template_dir to secure_dir array
        array_unshift($smarty->secure_dir, $smarty->template_dir);
      }
      $check_template_dir = false;
    }
    if (!empty($smarty->secure_dir)) {
      $_rp = realpath($params['resource_name']);
      foreach ((array) $smarty->secure_dir as $curr_dir) {
        if (!empty($curr_dir) && is_readable($curr_dir)) {
          $_cd = realpath($curr_dir);
          if (strncmp($_rp, $_cd, strlen($_cd)) == 0 && $_rp[strlen($_cd)] == DIRECTORY_SEPARATOR) {
            $_smarty_secure = true;
            break;
          }
        }
      }
    }
  }
  else {

    // resource is not on local file system
    $_smarty_secure = call_user_func_array($smarty->_plugins['resource'][$params['resource_type']][0][2], array(
      $params['resource_name'],
      &$_smarty_secure,
      &$smarty,
    ));
  }
  return $_smarty_secure;
}