Julio Montoya 13 years ago
parent
commit
41e991b731
2 changed files with 9 additions and 27 deletions
  1. 7 24
      index.php
  2. 2 3
      main/document/save_pixlr.php

+ 7 - 24
index.php

@@ -38,37 +38,20 @@ $htmlHeadXtra[] ='
 			pause			: 10000
 		});
 	});
-	
-	if(navigator.cookieEnabled==false){
-        document.writeln("'.addslashes(Display::return_message(get_lang("NoCookies"), 'error')).'");
-	}
-	
+
 </script>
 
 <noscript>
-	'.addslashes(Display::return_message(get_lang("NoJavascript"), 'error')).'
+	'.Display::return_message(get_lang("NoJavascript"), 'error').'
 </noscript>
-
 ';
 
-//@todo add this in the template
-
-//check if javascript is enabled
-/*
-echo '<noscript>';
-echo Display::display_error_message(get_lang("NoJavascript"));
-echo '</noscript>';
-*/
-//check if cookies are enabled
-/*
-?>
-<script language="JavaScript">
-if(navigator.cookieEnabled==false){
-        document.writeln('<?php Display::display_error_message(get_lang("NoCookies")); ?>');
+//check cookies
+setcookie("TestCookie", "cookies_yes", time()+3600);
+if( !isset($_COOKIE["TestCookie"]) && empty($_COOKIE["TestCookie"]) ) {
+	Display::display_error_message(get_lang("NoCookies"));
 }
-</script>
-<?php
-*/
+
 $controller = new IndexManager($header_title);
 
 //Actions

+ 2 - 3
main/document/save_pixlr.php

@@ -43,13 +43,12 @@ $currentTool=$_SESSION['whereami'];
 $dirBaseDocuments = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document';
 $saveDir=$dirBaseDocuments.$_SESSION['paint_dir'];
 $contents = file_get_contents($urlcontents);
-
+echo $urlcontents;
 //Verify that the URL is pointing to a file @ pixlr.com domain or ip
-if (strpos($urlcontents, "pixlr.com") == 0 && strpos($urlcontents, "69.164.195.250") == 0){
+if (strpos($urlcontents, "pixlr.com") == 0 && strpos($urlcontents, "69.164.195.250") == 0 && strpos($urlcontents, "173.255.196.130") == 0){
   echo "Invalid referrer";
   exit;
 }
-
 //Verify that the file is an image
 $headers = get_headers($urlcontents, 1);
 $content_type = explode("/", $headers['Content-Type']);