Skip to content

Commit 709df81

Browse files
committed
Fix for XSS lgsl_list.php
1 parent 3229d58 commit 709df81

File tree

1 file changed

+165
-0
lines changed

1 file changed

+165
-0
lines changed

lgsl_files/lgsl_config.php

Lines changed: 165 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1 +1,166 @@
1+
<?php
12

3+
//------------------------------------------------------------------------------------------------------------+
4+
//[ PREPARE CONFIG - DO NOT CHANGE OR MOVE THIS ]
5+
6+
global $lgsl_config; $lgsl_config = array();
7+
8+
//------------------------------------------------------------------------------------------------------------+
9+
//[ FEED: 0=OFF 1=CURL OR FSOCKOPEN 2=FSOCKOPEN ONLY / LEAVE THE URL ALONE UNLESS YOU KNOW WHAT YOUR DOING ]
10+
11+
$lgsl_config['feed']['method'] = 0;
12+
$lgsl_config['feed']['url'] = "http://www.greycube.co.uk/lgsl/feed/lgsl_files/lgsl_feed.php";
13+
14+
//------------------------------------------------------------------------------------------------------------+
15+
//[ ADDITIONAL FILES ]
16+
17+
$lgsl_config['style'] = "darken_style.css"; // options: breeze_style.css, darken_style.css, classic_style.css, ogp_style.css, parallax_style.css, disc_ff_style.css, material_style.css, cards_style.css
18+
$lgsl_config['scripts'] = [];
19+
20+
//------------------------------------------------------------------------------------------------------------+
21+
//[ SHOW LOCATION FLAGS: 0=OFF 1=GEO-IP "GB"=MANUALLY SET COUNTRY CODE FOR SPEED ]
22+
23+
$lgsl_config['locations'] = 0;
24+
25+
//------------------------------------------------------------------------------------------------------------+
26+
//[ SHOW TOTAL SERVERS AND PLAYERS AT BOTTOM OF LIST: 0=OFF 1=ON ]
27+
28+
$lgsl_config['list']['totals'] = 0;
29+
30+
//------------------------------------------------------------------------------------------------------------+
31+
//[ SORTING OPTIONS ]
32+
33+
$lgsl_config['sort']['servers'] = "id"; // OPTIONS: id type zone players status
34+
$lgsl_config['sort']['players'] = "name"; // OPTIONS: name score time
35+
36+
//------------------------------------------------------------------------------------------------------------+
37+
//[ ZONE SIZING: HEIGHT OF PLAYER BOX DYNAMICALLY CHANGES WITH THE NUMBER OF PLAYERS ]
38+
39+
$lgsl_config['zone']['width'] = "160"; // images will be cropped unless also resized to match
40+
$lgsl_config['zone']['line_size'] = "19"; // player box height is this number multiplied by player names
41+
$lgsl_config['zone']['height'] = "100"; // player box height limit
42+
43+
//------------------------------------------------------------------------------------------------------------+
44+
//[ ZONE GRID: NUMBER=WIDTH OF GRID - INCREASE FOR HORIZONTAL ZONE STACKING ]
45+
46+
$lgsl_config['grid'][1] = 1;
47+
$lgsl_config['grid'][2] = 1;
48+
$lgsl_config['grid'][3] = 1;
49+
$lgsl_config['grid'][4] = 1;
50+
$lgsl_config['grid'][5] = 1;
51+
$lgsl_config['grid'][6] = 1;
52+
$lgsl_config['grid'][7] = 1;
53+
$lgsl_config['grid'][8] = 1;
54+
55+
//------------------------------------------------------------------------------------------------------------+
56+
//[ ZONE SHOWS PLAYER NAMES: 0=HIDE 1=SHOW ]
57+
58+
$lgsl_config['players'][1] = 1;
59+
$lgsl_config['players'][2] = 1;
60+
$lgsl_config['players'][3] = 1;
61+
$lgsl_config['players'][4] = 1;
62+
$lgsl_config['players'][5] = 1;
63+
$lgsl_config['players'][6] = 1;
64+
$lgsl_config['players'][7] = 1;
65+
$lgsl_config['players'][8] = 1;
66+
67+
//------------------------------------------------------------------------------------------------------------+
68+
//[ ZONE RANDOMISATION: NUMBER=MAX RANDOM SERVERS TO BE SHOWN ]
69+
70+
$lgsl_config['random'][0] = 0;
71+
$lgsl_config['random'][1] = 0;
72+
$lgsl_config['random'][2] = 0;
73+
$lgsl_config['random'][3] = 0;
74+
$lgsl_config['random'][4] = 0;
75+
$lgsl_config['random'][5] = 0;
76+
$lgsl_config['random'][6] = 0;
77+
$lgsl_config['random'][7] = 0;
78+
$lgsl_config['random'][8] = 0;
79+
80+
//------------------------------------------------------------------------------------------------------------+
81+
// [ HIDE OFFLINE SERVERS: 0=HIDE 1=SHOW
82+
83+
$lgsl_config['hide_offline'][0] = 0;
84+
$lgsl_config['hide_offline'][1] = 0;
85+
$lgsl_config['hide_offline'][2] = 0;
86+
$lgsl_config['hide_offline'][3] = 0;
87+
$lgsl_config['hide_offline'][4] = 0;
88+
$lgsl_config['hide_offline'][5] = 0;
89+
$lgsl_config['hide_offline'][6] = 0;
90+
$lgsl_config['hide_offline'][7] = 0;
91+
$lgsl_config['hide_offline'][8] = 0;
92+
93+
//------------------------------------------------------------------------------------------------------------+
94+
//[ e107 VERSION: TITLES - OTHER VERSIONS ARE SET BY THE CMS ]
95+
96+
$lgsl_config['title'][0] = "Live Game Server List";
97+
$lgsl_config['title'][1] = "Game Server";
98+
$lgsl_config['title'][2] = "Game Server";
99+
$lgsl_config['title'][3] = "Game Server";
100+
$lgsl_config['title'][4] = "Game Server";
101+
$lgsl_config['title'][5] = "Game Server";
102+
$lgsl_config['title'][6] = "Game Server";
103+
$lgsl_config['title'][7] = "Game Server";
104+
$lgsl_config['title'][8] = "Game Server";
105+
106+
//------------------------------------------------------------------------------------------------------------+
107+
//[ STAND-ALONE VERSION: LGSL ADMIN LOGON ]
108+
109+
$lgsl_config['admin']['user'] = "lgsladmin";
110+
$lgsl_config['admin']['pass'] = "changeme";
111+
112+
//------------------------------------------------------------------------------------------------------------+
113+
//[ DATABASE SETTINGS: FOR STAND-ALONE OR TO OVERRIDE CMS DEFAULTS ]
114+
115+
$lgsl_config['db']['server'] = "localhost";
116+
$lgsl_config['db']['user'] = "root";
117+
$lgsl_config['db']['pass'] = "";
118+
$lgsl_config['db']['db'] = "lgsl";
119+
$lgsl_config['db']['table'] = "lgsl";
120+
121+
//------------------------------------------------------------------------------------------------------------+
122+
//[ HOSTING FIXES ]
123+
124+
$lgsl_config['direct_index'] = 0; // 1=link to index.php instead of the folder
125+
$lgsl_config['no_realpath'] = 0; // 1=do not use the realpath function
126+
$lgsl_config['url_path'] = ""; // full url to /lgsl_files/ for when auto detection fails
127+
128+
//------------------------------------------------------------------------------------------------------------+
129+
//[ ADVANCED SETTINGS ]
130+
131+
$lgsl_config['management'] = 0; // 1=show advanced management in the admin by default
132+
$lgsl_config['host_to_ip'] = 0; // 1=show the servers ip instead of its hostname
133+
$lgsl_config['public_add'] = 0; // 1=servers require approval OR 2=servers shown instantly
134+
$lgsl_config['public_feed'] = 0; // 1=feed requests can add new servers to your list
135+
$lgsl_config['cache_time'] = 60; // seconds=time before a server needs updating
136+
$lgsl_config['autoreload'] = false; // true=reloads page when cache_time is passed
137+
$lgsl_config['history'] = false; // true=enable server tracking (history of past 24 hours)
138+
$lgsl_config['live_time'] = 3; // seconds=time allowed for updating servers per page load
139+
$lgsl_config['timeout'] = 0; // 1=gives more time for servers to respond but adds loading delay
140+
$lgsl_config['retry_offline'] = 0; // 1=repeats query when there is no response but adds loading delay
141+
$lgsl_config['cms'] = "sa"; // sets which CMS specific code to use
142+
$lgsl_config['image_mod'] = false; // true=show userbar in server's details
143+
$lgsl_config['pagination_mod']= true; // true=using pagination
144+
$lgsl_config['pagination_lim']= 15; // limit per page
145+
$lgsl_config['preloader'] = true; // true=using ajax to faster loading page
146+
$lgsl_config['disabled_types']= false; // allow to exclude some protocols (games) from list. usage: $lgsl_config['disabled_types']= array('warsowold', 'halflifewon', 'test');
147+
148+
//------------------------------------------------------------------------------------------------------------+
149+
//[ TRANSLATION ]
150+
151+
include("languages/english.php"); // sets LGSL language
152+
// English language: "languages/english.php" // Richard Perry
153+
// Russian language: "languages/russian.php" // Neon
154+
// French language: "languages/french.php" // own3mall
155+
// German language: "languages/german.php" // ctannurella
156+
// Spanish language: "languages/spanish.php" // own3mall
157+
// Czech language: "languages/czech.php" // Neon
158+
// Bulgarian language: "languages/bulgarian.php" // Neon
159+
// Slovak language: "languages/slovak.php" // KristianP26
160+
// Arabic language: "languages/arabic.php" // lamjed001
161+
// Turkish language: "languages/turkish.php" // izmoxkawaii
162+
// Romanian language: "languages/romanian.php" // BaxAndrei
163+
// Korean language: "languages/korean.php" // izmoxkawaii
164+
// Chinese_simplified language: "languages/chinese_simplified.php" // Nanfei
165+
166+
//------------------------------------------------------------------------------------------------------------+

0 commit comments

Comments
 (0)