вот первые строки из index.php
// Установка флага родительского файла
define( '_VALID_MOS', 1 );
if (!file_exists( '../configuration.php' )) {
header( 'Location: ../installation/index.php' );
exit();
}
require( '../globals.php' );
require_once( '../configuration.php' );
// SSL check - $http_host returns <live site url>:<port number if it is 443>
$http_host = explode(':', $_SERVER['HTTP_HOST'] );
if( (!empty( $_SERVER['HTTPS'] ) && strtolower( $_SERVER['HTTPS'] ) != 'off' || isset( $http_host[1] ) && $http_host[1] == 443) && substr( $mosConfig_live_site, 0, 8 ) != 'https://' ) {
$mosConfig_live_site = 'https://'.substr( $mosConfig_live_site, 7 );
}
require_once( '../includes/joomla.php' );
include_once ( $mosConfig_absolute_path . '/language/'. $mosConfig_lang .'.php' );
//Installation sub folder check, removed for work with SVN
if (file_exists( '../installation/index.php' ) && $_VERSION->SVN == 0) {
define( '_INSTALL_CHECK', 1 );
include ($mosConfig_absolute_path .'/offline.php');
exit();
}
$option = strtolower( strval( mosGetParam( $_REQUEST, 'option', NULL ) ) );
// mainframe is an API workhorse, lots of 'core' interaction routines
$mainframe = new mosMainFrame( $database, $option, '..', true );
if (isset( $_POST['submit'] )) {
/** escape and trim to minimise injection of malicious sql */
!!!!Тут находится 101 строка.
$usrname = stripslashes( mosGetParam( $_POST, 'usrname', NULL ) );
$pass = stripslashes( mosGetParam( $_POST, 'pass', NULL ) );
if($pass == NULL) {
echo "<script>alert('Пожалуйста, введите пароль'); document.location.href='index.php?mosmsg=Пожалуйста, введите пароль'</script>\n";
exit();
} else {
$pass = md5( $pass );
}
