Multi-Domain & Underscore - Fix

- Multi-Domain-Fix - Area with underscore Fix
sefrengo-cms · Feb 11, 2015 · 8b3e132 · 8b3e132
1 parent da0ef05
commit 8b3e132
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/backend/external/phplib/local.php b/backend/external/phplib/local.php
@@ -490,8 +490,8 @@ class cms_Backend_Session extends Session {
     var $cookiename = 'sefrengo'; // Name des Cookies
     var $name = 'cms';
     var $magic = 'backend_Session'; // beliebiger Name zur Verschl?sselung
-    var $mode = 'cookie'; // default Modus der Session-ID
-    var $fallback_mode = 'get'; // falls default Modus abgelehnt wird
+    var $mode = 'get'; // default Modus der Session-ID
+    var $fallback_mode = 'cookie'; // falls default Modus abgelehnt wird
     var $lifetime = '0'; // 0 = do session cookies, else minutes
     var $refresh = '0'; // 0 = no refresh, else minutes
     var $that_class = 'cms_CT_Sql'; // name of data storage container

diff --git a/backend/main.php b/backend/main.php
@@ -209,7 +209,7 @@
 if ( $cfg_rep['repository_init_plugins'] ) $rep->init_plugins();
 
 // Area wählen
-if(@!include("inc/inc.".preg_replace('/[^a-zA-Z0-9 -]/','',$area).".php")){
+if(@!include("inc/inc.".preg_replace('/[^a-zA-Z0-9_-]/','',$area).".php")){
  	die("Stop. Maybe XSS?");
 };