Gecko [ www.thearyasamaj.org ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
cfdefs	[ DIR ]	drwxr-xr-x
classes	[ DIR ]	drwxr-xr-x
.htaccess	59 B	-rw-r--r--
.mad-root	0 B	-rw-r--r--
access_api.php	23.38 KB	-rw-r--r--
ajax_api.php	1.78 KB	-rw-r--r--
authentication_api.php	24.22 KB	-rw-r--r--
bug_api.php	59.38 KB	-rw-r--r--
bug_group_action_api.php	11.72 KB	-rw-r--r--
bug_revision_api.php	9.94 KB	-rw-r--r--
bugnote_api.php	22.03 KB	-rw-r--r--
category_api.php	18.27 KB	-rw-r--r--
collapse_api.php	6.54 KB	-rw-r--r--
columns_api.php	41.71 KB	-rw-r--r--
compress_api.php	4.26 KB	-rw-r--r--
config_api.php	20.95 KB	-rw-r--r--
constant_inc.php	15.77 KB	-rw-r--r--
csv_api.php	10.49 KB	-rw-r--r--
current_user_api.php	6.61 KB	-rw-r--r--
custom_field_api.php	44.01 KB	-rw-r--r--
custom_function_api.php	15.43 KB	-rw-r--r--
database_api.php	26.36 KB	-rw-r--r--
date_api.php	8.34 KB	-rw-r--r--
email_api.php	50.19 KB	-rw-r--r--
email_queue_api.php	4.91 KB	-rw-r--r--
error_api.php	12.19 KB	-rw-r--r--
event_api.php	9.3 KB	-rw-r--r--
events_inc.php	4.34 KB	-rw-r--r--
excel_api.php	19.57 KB	-rw-r--r--
file_api.php	32.11 KB	-rw-r--r--
filter_api.php	171.82 KB	-rw-r--r--
form_api.php	6.39 KB	-rw-r--r--
gpc_api.php	14.34 KB	-rw-r--r--
graphviz_api.php	13.6 KB	-rw-r--r--
helper_api.php	16.08 KB	-rw-r--r--
history_api.php	20.75 KB	-rw-r--r--
html_api.php	54.7 KB	-rw-r--r--
html_api_19-09-13.php	54.69 KB	-rw-r--r--
http_api.php	5.71 KB	-rw-r--r--
icon_api.php	2.67 KB	-rw-r--r--
json_api.php	3.37 KB	-rw-r--r--
lang_api.php	8.59 KB	-rw-r--r--
last_visited_api.php	2.82 KB	-rw-r--r--
ldap_api.php	15.59 KB	-rw-r--r--
logging_api.php	3.02 KB	-rw-r--r--
mobile_api.php	3.03 KB	-rw-r--r--
news_api.php	8.87 KB	-rw-r--r--
obsolete.php	5.39 KB	-rw-r--r--
php_api.php	3.17 KB	-rw-r--r--
plugin_api.php	24.38 KB	-rw-r--r--
prepare_api.php	3.32 KB	-rw-r--r--
print_api.php	63.29 KB	-rw-r--r--
profile_api.php	9.35 KB	-rw-r--r--
projax_api.php	3.22 KB	-rw-r--r--
project_api.php	25.56 KB	-rw-r--r--
project_hierarchy_api.php	9.88 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
relationship_api.php	32.31 KB	-rw-r--r--
relationship_graph_api.php	15.13 KB	-rw-r--r--
rss_api.php	4.41 KB	-rw-r--r--
session_api.php	7.69 KB	-rw-r--r--
sponsorship_api.php	12.25 KB	-rw-r--r--
string_api.php	29.12 KB	-rw-r--r--
summary_api.php	39.92 KB	-rw-r--r--
tag_api.php	22.85 KB	-rw-r--r--
tokens_api.php	7.64 KB	-rw-r--r--
twitter_api.php	4.51 KB	-rw-r--r--
url_api.php	2.06 KB	-rw-r--r--
user_api.php	40.99 KB	-rw-r--r--
user_pref_api.php	17.01 KB	-rw-r--r--
utility_api.php	7.63 KB	-rw-r--r--
version_api.php	21.15 KB	-rw-r--r--
wiki_api.php	2.2 KB	-rw-r--r--
xmlhttprequest_api.php	3.26 KB	-rw-r--r--

Code Editor : http_api.php

<?php
# MantisBT - a php based bugtracking system

# MantisBT is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 2 of the License, or
# (at your option) any later version.
#
# MantisBT is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with MantisBT.  If not, see <http://www.gnu.org/licenses/>.

/**
 * API for managing HTTP response headers and transactions.
 * @package CoreAPI
 * @subpackage HTTPAPI
 * @copyright Copyright (C) 2002 - 2013  MantisBT Team - mantisbt-dev@lists.sourceforge.net
 * @link http://www.mantisbt.org
 */

/**
 * Checks to see if script was queried through the HTTPS protocol
 * @return boolean True if protocol is HTTPS
 */
function http_is_protocol_https() {
	return !empty( $_SERVER['HTTPS'] ) && ( utf8_strtolower( $_SERVER['HTTPS'] ) != 'off' );
}

/**
 * Check to see if the client is using Microsoft Internet Explorer so we can
 * enable quirks and hacky non-standards-compliant workarounds.
 * @return boolean True if Internet Explorer is detected as the user agent
 */
function is_browser_internet_explorer() {
	$t_user_agent = isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : 'none';

if ( strpos( $t_user_agent, 'MSIE' ) ) {
		return true;
	}

return false;
}

/**
 * Checks to see if the client is using Google Chrome so we can enable quirks
 * and hacky non-standards-compliant workarounds.
 * @return boolean True if Chrome is detected as the user agent
 */
function is_browser_chrome() {
	$t_user_agent = isset( $_SERVER['HTTP_USER_AGENT'] ) ? $_SERVER['HTTP_USER_AGENT'] : 'none';

if ( strpos( $t_user_agent, 'Chrome/' ) ) {
		return true;
	}

return false;
}

/**
 * Send a Content-Disposition header. This is more complex than it sounds
 * because only a few browsers properly support RFC2231. For those browsers
 * which are behind the times or are otherwise broken, we need to use
 * some hacky workarounds to get them to work 'nicely' with attachments and
 * inline files. See http://greenbytes.de/tech/tc2231/ for full reasoning.
 * @param string Filename
 * @param boolean Display file inline (optional, default = treat as attachment)
 */
function http_content_disposition_header( $p_filename, $p_inline = false ) {
	if ( !headers_sent() ) {
		$t_encoded_filename = rawurlencode( $p_filename );
		$t_disposition = '';
		if ( !$p_inline ) {
			$t_disposition = 'attachment;';
		}
		if ( is_browser_internet_explorer() || is_browser_chrome() ) {
			// Internet Explorer does not support RFC2231 however it does
			// incorrectly decode URL encoded filenames and we can use this to
			// get UTF8 filenames to work with the file download dialog. Chrome
			// behaves in the same was as Internet Explorer in this respect.
			// See http://greenbytes.de/tech/tc2231/#attwithfnrawpctenclong
			header( 'Content-Disposition:' . $t_disposition . ' filename="' . $t_encoded_filename . '"' );
		} else {
			// For most other browsers, we can use this technique:
			// http://greenbytes.de/tech/tc2231/#attfnboth2
			header( 'Content-Disposition:' . $t_disposition . ' filename*=UTF-8\'\'' . $t_encoded_filename . '; filename="' . $t_encoded_filename . '"' );
		}
	}
}

/**
 * Set caching headers that will allow or prevent browser caching.
 * @param boolean Allow caching
 */
function http_caching_headers( $p_allow_caching=false ) {
	global $g_allow_browser_cache;

// Headers to prevent caching
	// with option to bypass if running from script
	if ( !headers_sent() ) {
		if ( $p_allow_caching || ( isset( $g_allow_browser_cache ) && ON == $g_allow_browser_cache ) ) {
			if ( is_browser_internet_explorer() ) {
				header( 'Cache-Control: private, proxy-revalidate' );
			} else {
				header( 'Cache-Control: private, must-revalidate' );
			}
		} else {
			header( 'Cache-Control: no-store, no-cache, must-revalidate' );
		}

header( 'Expires: ' . gmdate( 'D, d M Y H:i:s \G\M\T', time() ) );
		header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s \G\M\T', time() ) );
	}
}

/**
 * Set content-type headers.
 */
function http_content_headers() {
	if ( !headers_sent() ) {
		header( 'Content-Type: text/html; charset=utf-8' );
		# For Internet Explorer 8 as per http://blogs.msdn.com/ie/archive/2008/07/02/ie8-security-part-v-comprehensive-protection.aspx
		# Don't let IE second guess our content-type!
		header( 'X-Content-Type-Options: nosniff' );
	}
}

/**
 * Set security headers (frame busting, clickjacking/XSS/CSRF protection).
 */
function http_security_headers() {
	if ( !headers_sent() ) {
		header( 'X-Frame-Options: DENY' );
		$t_avatar_img_allow = '';
		if ( config_get_global( 'show_avatar' ) ) {
			if ( http_is_protocol_https() ) {
				$t_avatar_img_allow = "; img-src 'self' https://secure.gravatar.com:443";
			} else {
				$t_avatar_img_allow = "; img-src 'self' http://www.gravatar.com:80";
			}
		}
		header( "X-Content-Security-Policy: allow 'self'; options inline-script eval-script$t_avatar_img_allow; frame-ancestors 'none'" );
	}
}

/**
 * Load and set any custom headers defined by the site configuration.
 */
function http_custom_headers() {
	if ( !headers_sent() ) {
		// send user-defined headers
		foreach( config_get_global( 'custom_headers' ) as $t_header ) {
			header( $t_header );
		}
	}
}

/**
 * Set all headers used by a normal page load.
 */
function http_all_headers() {
	global $g_bypass_headers;

if ( !$g_bypass_headers && !headers_sent() ) {
		http_content_headers();
		http_caching_headers();
		http_security_headers();
		http_custom_headers();
	}
}

${this.title}

Code Editor : http_api.php