Changeset 19854 for branches/version-2_5-dev/data

Timestamp:

2011/01/08 03:11:29 (13 years ago)

Author:

tao

Message:

#841 インストール画面に管理画面のディレクトリ、SSL制限、IP制限を追加。管理画面でのアクセス制限も追加

Location:

branches/version-2_5-dev/data/class

Files:

• SC_CheckError.php (modified) (1 diff)
• SC_FormParam.php (modified) (1 diff)
• pages/admin/LC_Page_Admin.php (modified) (1 diff)

branches/version-2_5-dev/data/class/SC_CheckError.php

@@ -585 +585 @@
         if( strlen($this->arrParam[$value[1]]) > 0 && !ereg( "^https?://+($|[a-zA-Z0-9_~=:&\?\.\/-])+$", $this->arrParam[$value[1]] ) ) {
             $this->arrErr[$value[1]] = "※ " . $value[0] . "を正しく入力してください。<br />";
+        }
+    }
+
+    /*　IPアドレスの判定　*/
+    //  value[0] = 項目名 value[1] = 判定対象IPアドレス文字列
+    function IP_CHECK( $value ){
+        if(isset($this->arrErr[$value[1]])) {
+            return;
+        }
+        //改行コードが含まれている場合には配列に変換
+        $params = str_replace("\r","",$this->arrParam[$value[1]]);
+        if(strpos("\n",$params) === false){
+            $params .= "\n";
+        }
+        $params = explode("\n",$params);
+        foreach($params as $param){
+            $param = trim($param);
+            if(long2ip(ip2long($param)) != trim($param) and !empty($param)) {
+                $this->arrErr[$value[1]] = "※ " . $value[0] . "に正しい形式のIPアドレスを入力してください。<br />";
+            }
         }
     }

branches/version-2_5-dev/data/class/SC_FormParam.php

@@ -190 +190 @@
                 case 'KANA_CHECK':
                 case 'URL_CHECK':
+                case 'IP_CHECK':
                 case 'SPTAB_CHECK':
                 case 'ZERO_CHECK':

branches/version-2_5-dev/data/class/pages/admin/LC_Page_Admin.php

@@ -44 +44 @@
     function init() {
         $this->template = MAIN_FRAME;
+        
+        //IP制限チェック
+        if(defined("ADMIN_ALLOW_HOSTS")){
+            $allow_hosts = unserialize(ADMIN_ALLOW_HOSTS);
+            if(array_search($_SERVER["REMOTE_ADDR"],$allow_hosts) === FALSE){
+                SC_Response::sendError("403");
+                exit;
+            }
+        }
+        
+        //SSL制限チェック
+        if(ADMIN_FORCE_SSL == TRUE){
+            if(empty($_SERVER['HTTPS']) AND $_SERVER['SERVER_PORT'] != 443){
+                SC_Response::sendRedirect($SERVER["REQUEST_URI"], $_GET,FALSE, TRUE);
+            }
+        }
 
         // ディスプレイクラス生成