Changeset 14992 for branches/rel

Timestamp:

2007/06/28 16:49:46 (16 years ago)

Author:

adati

Message:

CSRF対策：定数REVIEW_ALLOW_URLを追加、商品レビューでURLの書き込みを許可するかどうかのflg

File:

• branches/rel/data/conf/conf.php (modified) (1 diff)

branches/rel/data/conf/conf.php

@@ -837 +837 @@
     4 => "MainFoot",
     5 => "Unused"
+);
+
+/*--------- ¢¥¾¦ÉÊ¥ì¥Ó¥å¡¼ÍÑ ---------*/
+// ¾¦ÉÊ¥ì¥Ó¥å¡¼¤ÇURL½ñ¤­¹þ¤ß¤òµö²Ä¤¹¤ë¤«Èݤ«
+define ('REVIEW_ALLOW_URL', false);
+
+// ½ñ¤­¹þ¤ßÉԲĤÎURLʸ»úÎó
+$arrReviewDenyURL = array(
+    'http://',
+    'https://',
+    'ttp://',
+    'ttps://',
 );