Gecko [ www.thearyasamaj.org ]

Name	Size	Permission
.pkexec	[ DIR ]	drwxr-xr-x
GCONV_PATH=.	[ DIR ]	drwxr-xr-x
cfdefs	[ DIR ]	drwxr-xr-x
classes	[ DIR ]	drwxr-xr-x
.htaccess	59 B	-rw-r--r--
.mad-root	0 B	-rw-r--r--
access_api.php	23.38 KB	-rw-r--r--
ajax_api.php	1.78 KB	-rw-r--r--
authentication_api.php	24.22 KB	-rw-r--r--
bug_api.php	59.38 KB	-rw-r--r--
bug_group_action_api.php	11.72 KB	-rw-r--r--
bug_revision_api.php	9.94 KB	-rw-r--r--
bugnote_api.php	22.03 KB	-rw-r--r--
category_api.php	18.27 KB	-rw-r--r--
collapse_api.php	6.54 KB	-rw-r--r--
columns_api.php	41.71 KB	-rw-r--r--
compress_api.php	4.26 KB	-rw-r--r--
config_api.php	20.95 KB	-rw-r--r--
constant_inc.php	15.77 KB	-rw-r--r--
csv_api.php	10.49 KB	-rw-r--r--
current_user_api.php	6.61 KB	-rw-r--r--
custom_field_api.php	44.01 KB	-rw-r--r--
custom_function_api.php	15.43 KB	-rw-r--r--
database_api.php	26.36 KB	-rw-r--r--
date_api.php	8.34 KB	-rw-r--r--
email_api.php	50.19 KB	-rw-r--r--
email_queue_api.php	4.91 KB	-rw-r--r--
error_api.php	12.19 KB	-rw-r--r--
event_api.php	9.3 KB	-rw-r--r--
events_inc.php	4.34 KB	-rw-r--r--
excel_api.php	19.57 KB	-rw-r--r--
file_api.php	32.11 KB	-rw-r--r--
filter_api.php	171.82 KB	-rw-r--r--
form_api.php	6.39 KB	-rw-r--r--
gpc_api.php	14.34 KB	-rw-r--r--
graphviz_api.php	13.6 KB	-rw-r--r--
helper_api.php	16.08 KB	-rw-r--r--
history_api.php	20.75 KB	-rw-r--r--
html_api.php	54.7 KB	-rw-r--r--
html_api_19-09-13.php	54.69 KB	-rw-r--r--
http_api.php	5.71 KB	-rw-r--r--
icon_api.php	2.67 KB	-rw-r--r--
json_api.php	3.37 KB	-rw-r--r--
lang_api.php	8.59 KB	-rw-r--r--
last_visited_api.php	2.82 KB	-rw-r--r--
ldap_api.php	15.59 KB	-rw-r--r--
logging_api.php	3.02 KB	-rw-r--r--
mobile_api.php	3.03 KB	-rw-r--r--
news_api.php	8.87 KB	-rw-r--r--
obsolete.php	5.39 KB	-rw-r--r--
php_api.php	3.17 KB	-rw-r--r--
plugin_api.php	24.38 KB	-rw-r--r--
prepare_api.php	3.32 KB	-rw-r--r--
print_api.php	63.29 KB	-rw-r--r--
profile_api.php	9.35 KB	-rw-r--r--
projax_api.php	3.22 KB	-rw-r--r--
project_api.php	25.56 KB	-rw-r--r--
project_hierarchy_api.php	9.88 KB	-rw-r--r--
pwnkit	10.99 KB	-rwxr-xr-x
relationship_api.php	32.31 KB	-rw-r--r--
relationship_graph_api.php	15.13 KB	-rw-r--r--
rss_api.php	4.41 KB	-rw-r--r--
session_api.php	7.69 KB	-rw-r--r--
sponsorship_api.php	12.25 KB	-rw-r--r--
string_api.php	29.12 KB	-rw-r--r--
summary_api.php	39.92 KB	-rw-r--r--
tag_api.php	22.85 KB	-rw-r--r--
tokens_api.php	7.64 KB	-rw-r--r--
twitter_api.php	4.51 KB	-rw-r--r--
url_api.php	2.06 KB	-rw-r--r--
user_api.php	40.99 KB	-rw-r--r--
user_pref_api.php	17.01 KB	-rw-r--r--
utility_api.php	7.63 KB	-rw-r--r--
version_api.php	21.15 KB	-rw-r--r--
wiki_api.php	2.2 KB	-rw-r--r--
xmlhttprequest_api.php	3.26 KB	-rw-r--r--

Code Editor : session_api.php

<?php
# MantisBT - a php based bugtracking system

# MantisBT is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 2 of the License, or
# (at your option) any later version.
#
# MantisBT is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with MantisBT.  If not, see <http://www.gnu.org/licenses/>.

/**
 * Session API for handling user/browser sessions in an extendable manner.
 * New session handlers can be added and configured without affecting how
 * the API is used.  Calls to session_*() are appropriately directed at the
 * session handler class as chosen in config_inc.php.
 *
 * @package CoreAPI
 * @subpackage SessionAPI
 * @copyright Copyright (C) 2000 - 2002  Kenzaburo Ito - kenito@300baud.org
 * @copyright Copyright (C) 2002 - 2013  MantisBT Team - mantisbt-dev@lists.sourceforge.net
 * @link http://www.mantisbt.org
 *
 * @uses gpc_api.php
 */

/**
 * requires gpc_api
 */
require_once( 'gpc_api.php' );

/**
 *
 * @global MantisPHPSession $g_session
 */
$g_session = null;

/**
 * Abstract interface for a MantisBT session handler.
 * @package MantisBT
 * @subpackage classes
 */
abstract class MantisSession {
	var $id;

/**
	 * Constructor
	 */
	abstract function __construct();

/**
	 * get session data
	 * @param string $p_name
	 * @param mixed $p_default
	 */
	abstract function get( $p_name, $p_default = null );
	
	/**
	 * set session data
	 * @param string $p_name
	 * @param mixed $p_value
	 */
	abstract function set( $p_name, $p_value );
	
	/**
	 * delete session data
	 * @param string $p_name
	 */
	abstract function delete( $p_name );

/** 
	 * destroy session
	 */
	abstract function destroy();
}

/**
 * Implementation of the abstract MantisBT session interface using
 * standard PHP sessions stored on the server's filesystem according
 * to PHP's session.* settings in 'php.ini'.
 * @package MantisBT
 * @subpackage classes
 */
class MantisPHPSession extends MantisSession {
	/**
	 * Constructor
	 */
	function __construct( $p_session_id=null ) {
		global $g_cookie_secure_flag_enabled;
		global $g_cookie_httponly_flag_enabled;

$this->key = config_get_global( 'session_key' );

# Save session information where specified or with PHP's default
		$t_session_save_path = config_get_global( 'session_save_path' );
		if( $t_session_save_path ) {
			session_save_path( $t_session_save_path );
		}

# Handle session cookie and caching
		session_cache_limiter( 'private_no_expire' );
		if ( $g_cookie_httponly_flag_enabled ) {
			# The HttpOnly cookie flag is only supported in PHP >= 5.2.0
			session_set_cookie_params( 0, config_get( 'cookie_path' ), config_get( 'cookie_domain' ), $g_cookie_secure_flag_enabled, $g_cookie_httponly_flag_enabled );
		} else {
			session_set_cookie_params( 0, config_get( 'cookie_path' ), config_get( 'cookie_domain' ), $g_cookie_secure_flag_enabled );
		}

# Handle existent session ID
		if ( !is_null( $p_session_id ) ) {
			session_id( $p_session_id );
		}

# Initialize the session
		session_start();
		$this->id = session_id();

# Initialize the keyed session store
		if ( !isset( $_SESSION[ $this->key ] ) ) {
			$_SESSION[ $this->key ] = array();
		}
	}

/**
	 * get session data
	 * @param string $p_name
	 * @param mixed $p_default
	 */	
	function get( $p_name, $p_default=null ) {
		if ( isset( $_SESSION[ $this->key ][ $p_name ] ) ) {
			return unserialize( $_SESSION[ $this->key ][ $p_name ] );
		}

if( func_num_args() > 1 ) {
			return $p_default;
		}

error_parameters( $p_name );
		trigger_error( ERROR_SESSION_VAR_NOT_FOUND, ERROR );
	}

/**
	 * set session data
	 * @param string $p_name
	 * @param mixed $p_value
	 */
	function set( $p_name, $p_value ) {
		$_SESSION[ $this->key ][ $p_name ] = serialize( $p_value );
	}

/**
	 * delete session data
	 * @param string $p_name
	 */
	function delete( $p_name ) {
		unset( $_SESSION[ $this->key ][ $p_name ] );
	}

/** 
	 * destroy session
	 */
	function destroy() {
		if( isset( $_COOKIE[session_name()] ) && !headers_sent() ) {
			gpc_set_cookie( session_name(), '', time() - 42000 );
		}

unset( $_SESSION[ $this->key ] );
	}
}

/**
 * Initialize the appropriate session handler.
 * @param string Session ID
 */
function session_init( $p_session_id=null ) {
	global $g_session, $g_session_handler;

switch( utf8_strtolower( $g_session_handler ) ) {
		case 'php':
			$g_session = new MantisPHPSession( $p_session_id );
			break;

case 'adodb':

# Not yet implemented
		case 'memcached':

# Not yet implemented
		default:
			trigger_error( ERROR_SESSION_HANDLER_INVALID, ERROR );
			break;
	}

if ( ON == config_get_global( 'session_validation' ) && session_get( 'secure_session', false ) ) {
		session_validate( $g_session );
	}
}

/**
 * Validate the legitimacy of a session.
 * Checks may include last-known IP address, or more.
 * Triggers an error when the session is invalid.
 * @param object Session object
 */
function session_validate( $p_session ) {
	$t_user_ip = '';
	if ( isset( $_SERVER['REMOTE_ADDR'] ) ) {
		$t_user_ip = trim( $_SERVER['REMOTE_ADDR'] );
	}

if ( is_null( $t_last_ip = $p_session->get( 'last_ip', null ) ) ) {
		# First session usage
		$p_session->set( 'last_ip', $t_user_ip );

} else {
		# Check a continued session request
		if ( $t_user_ip != $t_last_ip ) {
			session_clean();

trigger_error( ERROR_SESSION_NOT_VALID, WARNING );

$t_url = config_get_global( 'path' ) . config_get_global( 'default_home_page' );
			echo "\t<meta http-equiv=\"Refresh\" content=\"4;URL=$t_url\" />\n";

die();
		}
	}
}

/**
 * Get arbitrary data from the session.
 * @param string Session variable name
 * @param mixed Default value
 * @return mixed Session variable
 */
function session_get( $p_name, $p_default = null ) {
	global $g_session;

$t_args = func_get_args();
	return call_user_func_array( array( $g_session, 'get' ), $t_args );
}

/**
 * Get an integer from the session.
 * @param string Session variable name
 * @param mixed Default value
 * @return int Session variable
 */
function session_get_int( $p_name, $p_default = null ) {
	global $g_session;
	$t_args = func_get_args();
	return (int) call_user_func_array( 'session_get', $t_args );
}

/**
 * Get a boolean from the session.
 * @param string Session variable name
 * @param mixed Default value
 * @return boolean Session variable
 */
function session_get_bool( $p_name, $p_default = null ) {
	global $g_session;
	$t_args = func_get_args();
	return true && call_user_func_array( 'session_get', $t_args );
}

/**
 * Get a string from the session.
 * @param string Session variable name
 * @param mixed Default value
 * @return string Session variable
 */
function session_get_string( $p_name, $p_default = null ) {
	global $g_session;
	$t_args = func_get_args();
	return '' . call_user_func_array( 'session_get', $t_args );
}

/**
 * Set a session variable.
 * @param string Session variable name
 * @param mixed Variable value
 */
function session_set( $p_name, $p_value ) {
	global $g_session;
	$g_session->set( $p_name, $p_value );
}

/**
 * Delete a session variable.
 * @param string Session variable name
 */
function session_delete( $p_name ) {
	global $g_session;
	$g_session->delete( $p_name );
}

/**
 * Destroy the session entirely.
 */
function session_clean() {
	global $g_session;
	$g_session->destroy();
}

# Initialize the session
if ( PHP_CGI == php_mode() ) {
	$t_session_id = gpc_get_string( 'session_id', '' );

if ( empty( $t_session_id ) ) {
		session_init();
	} else {
		session_init( $t_session_id );
	}
}

${this.title}

Code Editor : session_api.php