logger.php

Go to the documentation of this file.

<?php
# This file is part of the Savane project
# <http://gna.org/projects/savane/>
#
# $Id: logger.php 4567 2005-06-30 17:19:37Z toddy $
#
#  Copyright 1999-2000 (c) The SourceForge Crew
#  Copyright 2000-2003 (c) Free Software Foundation
#
#  Copyright 2004      (c) ...
# 
# The Savane project is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# The Savane project is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with the Savane project; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA

# No path disclosure when access comes from itself.
if (eregi("logger.php",$PHP_SELF))
        { 
   exit("Sorry, you can not access directly this file."); 
        }
 
if ($group_id) {
        $log_group=$group_id;
} else if ($form_grp) {
        $log_group=$form_grp;
} else {
        $log_group=0;
}

# Input validation of the $log_group value.

$log_group = trim($log_group);
$log_group = addslashes($log_group);

$sql =  "INSERT INTO activity_log "
        . "(day,hour,group_id,browser,ver,platform,time,page,type) "
        . "VALUES (" . date('Ymd', mktime()) . ",'" . date('H', mktime())
        . "','$log_group','" . browser_get_agent() . "','" . browser_get_version() 
        . "','" . browser_get_platform() . "','" . time() . "','$PHP_SELF','0');";

$res_logger = db_query ( $sql );

if (!$res_logger) {
        echo "An error occured in the logger.\n";
        echo db_error(); # FIXME: Check if important information is given when an error occurs.
        exit;
}


?>

---