Changeset 15035 for branches/rel/data/Smarty

Timestamp:

2007/07/10 22:12:44 (16 years ago)

Author:

adati

Message:

任意のドライブおよび、フォルダの画像ファイル等にアクセスが可能な脆弱性を修正

Location:

branches/rel/data/Smarty/templates

Files:

• admin/contents/campaign_create_tag.tpl (modified) (1 diff)
• admin/contents/recomend_search.tpl (modified) (1 diff)
• admin/design/template.tpl (modified) (3 diffs)
• admin/products/confirm.tpl (modified) (1 diff)
• admin/products/index.tpl (modified) (1 diff)
• admin/products/product.tpl (modified) (1 diff)
• admin/products/product_rank.tpl (modified) (1 diff)
• admin/products/product_select.tpl (modified) (1 diff)
• cart/index.tpl (modified) (1 diff)
• shopping/confirm.tpl (modified) (1 diff)

branches/rel/data/Smarty/templates/admin/contents/campaign_create_tag.tpl

@@ -109 +109 @@
             <td width="90" align="center">
             <!--{if $arrProducts[cnt].main_list_image != ""}-->
-                <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrProducts[cnt].main_list_image`"}-->
+                <!--{assign var=image_path value="`$arrProducts[cnt].main_list_image`"}-->
             <!--{else}-->
                 <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->

branches/rel/data/Smarty/templates/admin/contents/recomend_search.tpl

@@ -99 +99 @@
             <td width="90" align="center">
             <!--{if $arrProducts[cnt].main_list_image != ""}-->
-                <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrProducts[cnt].main_list_image`"}-->
+                <!--{assign var=image_path value="`$arrProducts[cnt].main_list_image`"}-->
             <!--{else}-->
                 <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->

branches/rel/data/Smarty/templates/admin/design/template.tpl

@@ -79 +79 @@
                                         <td bgcolor="#ffffff" align="center"><!--{$arrTemplate[template]}-->
                                             <span class="fs12">¡Ú<!--{$code}-->¡Û</span><br/>
-                                            <label for="radio<!--{$key}-->"><img src="<!--{$smarty.const.SITE_URL}-->resize_image.php?image=<!--{$smarty.const.HTML_PATH}--><!--{$image}-->&width=160&height=200" name="<!--{$key}-->" alt="<!--{$code}-->"></label><br>
+                                            <label for="radio<!--{$key}-->"><img src="<!--{$smarty.const.URL_DIR}--><!--{$image}-->" width="160" height="200" name="<!--{$key}-->" alt="<!--{$code}-->"></label><br>
                                             <span class="fs10n"><label for="radio<!--{$key}-->"><input type="radio" name="check_template" value="<!--{$code}-->" id="radio<!--{$key}-->" onClick="ChangeImage('<!--{$smarty.const.URL_DIR}--><!--{$image}-->');" <!--{if $arrTemplate.check[$code] != ""}-->checked<!--{/if}-->>ÁªÂò</label></span>
                                         </td>
@@ -89 +89 @@
                                         <td bgcolor="#ffffff" align="center"><!--{$arrTemplate[template]}-->
                                             <span class="fs12">¡Ú<!--{$code}-->¡Û</span><br/>
-                                            <label for="radio<!--{$key}-->"><img src="<!--{$smarty.const.SITE_URL}-->resize_image.php?image=<!--{$smarty.const.HTML_PATH}--><!--{$image}-->&width=160&height=200" name="<!--{$key}-->" alt="<!--{$code}-->"></label><br>
+                                            <label for="radio<!--{$key}-->"><img src="<!--{$smarty.const.URL_DIR}--><!--{$image}-->" width="160" height="200" name="<!--{$key}-->" alt="<!--{$code}-->></label><br>
                                             <span class="fs10n"><label for="radio<!--{$key}-->"><input type="radio" name="check_template" value="<!--{$code}-->" id="radio<!--{$key}-->" onClick="ChangeImage('<!--{$smarty.const.URL_DIR}--><!--{$image}-->');" <!--{if $arrTemplate.check[$code] != ""}-->checked<!--{/if}-->>ÁªÂò</label></span>
                                         </td>
@@ -100 +100 @@
                                         <td bgcolor="#ffffff" align="center"><!--{$arrTemplate[template]}-->
                                             <span class="fs12">¡Ú<!--{$code}-->¡Û</span><br/>
-                                            <label for="radio<!--{$key}-->"><img src="<!--{$smarty.const.SITE_URL}-->resize_image.php?image=<!--{$smarty.const.HTML_PATH}--><!--{$image}-->&width=160&height=200" name="<!--{$key}-->" alt="<!--{$code}-->"></label><br>
+                                            <label for="radio<!--{$key}-->"><img src="<!--{$smarty.const.URL_DIR}--><!--{$image}-->" width="160" height="200" name="<!--{$key}-->" alt="<!--{$code}-->></label><br>
                                             <span class="fs10n"><label for="radio<!--{$key}-->"><input type="radio" name="check_template" value="<!--{$code}-->" id="radio<!--{$key}-->" onClick="ChangeImage('<!--{$smarty.const.URL_DIR}--><!--{$image}-->');" <!--{if $arrTemplate.check[$code] != ""}-->checked<!--{/if}-->>ÁªÂò</label></span>
                                         </td>

branches/rel/data/Smarty/templates/admin/products/confirm.tpl

@@ -234 +234 @@
                                     <td bgcolor="#f2f1ec" width="160" class="fs12n">´ØÏ¢¾¦ÉÊ(<!--{$smarty.section.cnt.iteration}-->)<br>
                                     <!--{if $arrRecommend[$recommend_no].main_list_image != ""}-->
-                                        <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrRecommend[$recommend_no].main_list_image`"}-->
+                                        <!--{assign var=image_path value="`$arrRecommend[$recommend_no].main_list_image`"}-->
                                     <!--{else}-->
                                         <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->

branches/rel/data/Smarty/templates/admin/products/index.tpl

@@ -295 +295 @@
                             <td rowspan="2" align="center">
                             <!--{if $arrProducts[cnt].main_list_image != ""}-->
-                                <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrProducts[cnt].main_list_image`"}-->
+                                <!--{assign var=image_path value="`$arrProducts[cnt].main_list_image`"}-->
                             <!--{else}-->
                                 <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->

branches/rel/data/Smarty/templates/admin/products/product.tpl

@@ -354 +354 @@
                                         <td bgcolor="#f2f1ec" width="160" class="fs12n">´ØÏ¢¾¦ÉÊ(<!--{$smarty.section.cnt.iteration}-->)<br>
                                         <!--{if $arrRecommend[$recommend_no].main_list_image != ""}-->
-                                            <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrRecommend[$recommend_no].main_list_image`"}-->
+                                            <!--{assign var=image_path value="`$arrRecommend[$recommend_no].main_list_image`"}-->
                                         <!--{else}-->
                                             <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->

branches/rel/data/Smarty/templates/admin/products/product_rank.tpl

@@ -124 +124 @@
                                                 <!--{* ¾¦ÉʲèÁü *}-->
                                                 <!--{if $arrProductsList[cnt].main_list_image != ""}-->
-                                                    <!--{assign var=image_path value=`$smarty.const.IMAGE_SAVE_DIR`/`$arrProductsList[cnt].main_list_image`}-->
+                                                    <!--{assign var=image_path value=`$arrProductsList[cnt].main_list_image`}-->
                                                 <!--{else}-->
                                                     <!--{assign var=image_path value=$smarty.const.NO_IMAGE_URL}-->

branches/rel/data/Smarty/templates/admin/products/product_select.tpl

@@ -100 +100 @@
             <td width="90" align="center">
             <!--{if $arrProducts[cnt].main_list_image != ""}-->
-                <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrProducts[cnt].main_list_image`"}-->
+                <!--{assign var=image_path value="`$arrProducts[cnt].main_list_image`"}-->
             <!--{else}-->
                 <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->

branches/rel/data/Smarty/templates/cart/index.tpl

@@ -79 +79 @@
                             <td align="center"><a href="<!--{$smarty.server.PHP_SELF|escape}-->" onclick="fnChangeAction('<!--{$smarty.server.PHP_SELF|escape}-->'); fnModeSubmit('delete', 'cart_no', '<!--{$arrProductsClass[cnt].cart_no}-->'); return false;">ºï½ü</a></td>
                             <td ><a href="<!--{$smarty.server.PHP_SELF|escape}-->" onclick="win01('../products/detail_image.php?product_id=<!--{$arrProductsClass[cnt].product_id}-->&image=main_image','detail_image','<!--{$arrProductsClass[cnt].tpl_image_width}-->','<!--{$arrProductsClass[cnt].tpl_image_height}-->'); return false;" target="_blank">
-                                <img src="<!--{$smarty.const.URL_DIR}-->resize_image.php?image=<!--{$smarty.const.IMAGE_SAVE_DIR}-->/<!--{$arrProductsClass[cnt].main_list_image}-->&width=65&height=65" alt="<!--{$arrProductsClass[cnt].name|escape}-->">
+                                <img src="<!--{$smarty.const.URL_DIR}-->resize_image.php?image=<!--{$arrProductsClass[cnt].main_list_image}-->&width=65&height=65" alt="<!--{$arrProductsClass[cnt].name|escape}-->">
                             </a></td>
                             <td ><!--{* ¾¦ÉÊ̾ *}--><strong><!--{$arrProductsClass[cnt].name|escape}--></storng><br />

branches/rel/data/Smarty/templates/shopping/confirm.tpl

@@ -46 +46 @@
                         <td align="center">
                             <a href="<!--{$smarty.server.PHP_SELF|escape}-->" onclick="win01('../products/detail_image.php?product_id=<!--{$arrProductsClass[cnt].product_id}-->&image=main_image','detail_image','<!--{$arrProductsClass[cnt].tpl_image_width}-->','<!--{$arrProductsClass[cnt].tpl_image_height}-->'); return false;" target="_blank">
-                                <img src="<!--{$smarty.const.SITE_URL}-->resize_image.php?image=<!--{$smarty.const.IMAGE_SAVE_DIR}-->/<!--{$arrProductsClass[cnt].main_list_image}-->&width=65&height=65" alt="<!--{$arrProductsClass[cnt].name|escape}-->">
+                                <img src="<!--{$smarty.const.SITE_URL}-->resize_image.php?image=<!--{$arrProductsClass[cnt].main_list_image}-->&width=65&height=65" alt="<!--{$arrProductsClass[cnt].name|escape}-->">
                             </a>
                         </td>