Changeset 19767 for branches/version-2_5-dev/data/class/SC_Plugin.php

Timestamp:

2010/12/25 19:02:43 (16 years ago)

Author:

Seasoft

Message:

#838(PHPソース内でのパラメータ「USER_DIR」の利用不徹底)
#494(プラグイン機能)

• 怪しい処理にコメントを追加

File:

• branches/version-2_5-dev/data/class/SC_Plugin.php (modified) (3 diffs)

branches/version-2_5-dev/data/class/SC_Plugin.php

@@ -16 +16 @@
 
     function __construct(){
-        if(!defined(PLUGIN_PATH)){
-            define("PLUGIN_PATH",HTML_PATH."/user_data/plugins/");
+        if (!defined(PLUGIN_PATH)) {
+            define('PLUGIN_PATH', USER_PATH . 'plugins/');
         }
         $this->init();
@@ -57 +57 @@
     function disablePlugin(){
         $objQuery = new SC_Query();
-        $name = preg_replace("/.php/", "", __FILE__);
+        $name = preg_replace("/.php/", "", __FILE__); // XXX 正規表現エスケープ漏れでは?
         $objQuery->update("dtb_plugin", array('enable'=>'0'), "plugin_name = ?", array($name));
     }
@@ -63 +63 @@
     function enablePlugin(){
         $objQuery = new SC_Query();
-        $name = preg_replace("/.php/", "", __FILE__);
+        $name = preg_replace("/.php/", "", __FILE__); // XXX 正規表現エスケープ漏れでは?
         $objQuery->update("dtb_plugin", array('enable'=>'0'), "plugin_name = ?", array($name));
     }