Fixed bug #11621: XSS vulnerabilities in workspace module

[Packages/TYPO3.CMS.git] / typo3 / show_rechis.php
diff --git a/typo3/show_rechis.php b/typo3/show_rechis.php

old mode 100755 (executable)

new mode 100644 (file)

index 9d0a05e..f0ce36f
--- a/typo3/show_rechis.php
+++ b/typo3/show_rechis.php
@@ -2,7 +2,7 @@
  /***************************************************************
  *  Copyright notice
  *
-*  (c) 1999-2005 Kasper Skaarhoj (kasperYYYY@typo3.com)
+*  (c) 1999-2009 Kasper Skaarhoj (kasperYYYY@typo3.com)
  *  All rights reserved
  *
  *  This script is part of the TYPO3 project. The TYPO3 project is
@@ -52,8 +52,6 @@
  $BACK_PATH='';
  require ($BACK_PATH.'init.php');
  require ($BACK_PATH.'template.php');
-require_once (PATH_t3lib.'class.t3lib_diff.php');
-require_once (PATH_t3lib.'class.t3lib_tcemain.php');
  $LANG->includeLLFile('EXT:lang/locallang_show_rechis.xml');
  require_once ('class.show_rechis.inc');
  
@@ -96,7 +94,6 @@ class SC_show_rechis {
                         // Create internal template object:
                 $this->doc = t3lib_div::makeInstance('template');
                 $this->doc->backPath = $GLOBALS['BACK_PATH'];
-               $this->doc->docType = 'xhtml_trans';
                 $this->doc->setModuleTemplate('templates/show_rechis.html');
  
                         // Start the page header:
@@ -119,10 +116,10 @@ class SC_show_rechis {
                 $this->content .= $historyObj->main();
  
                         // Setting up the buttons and markers for docheader
-               $docHeaderButtons = $this->getButtons();        
+               $docHeaderButtons = $this->getButtons();
                 $markers['CONTENT'] = $this->content;
                 $markers['CSH'] = $docHeaderButtons['csh'];
-               
+
                         // Build the <body> for the module
                 $this->content = $this->doc->startPage($LANG->getLL('title'));
                 $this->content.= $this->doc->moduleBody($this->pageinfo, $docHeaderButtons, $markers);
@@ -139,20 +136,20 @@ class SC_show_rechis {
                 $this->content = $this->doc->insertStylesAndJS($this->content);
                 echo $this->content;
         }
-       
+
         /**
          * Create the panel of buttons for submitting the form or otherwise perform operations.
          *
          * @return      array   all available buttons as an assoc. array
          */
-       private function getButtons() {         
+       protected function getButtons() {
                 $buttons = array(
                         'csh' => '',
-                       'back' => ''            
+                       'back' => ''
                 );
  
-                       // CSH  
-               $buttons['csh'] = t3lib_BEfunc::cshItem('xMOD_csh_corebe', 'history_log', $GLOBALS['BACK_PATH'], '');
+                       // CSH
+               $buttons['csh'] = t3lib_BEfunc::cshItem('xMOD_csh_corebe', 'history_log', $GLOBALS['BACK_PATH'], '', TRUE);
  
                         // Start history object
                 $historyObj = t3lib_div::makeInstance('recordHistory');
@@ -160,30 +157,22 @@ class SC_show_rechis {
                 if ($historyObj->returnUrl)     {
                         $buttons['back']= '<a href="' . htmlspecialchars($historyObj->returnUrl) . '" class="typo3-goBack"><img' . t3lib_iconWorks::skinImg('', 'gfx/goback.gif') . ' alt="" title="' . $GLOBALS['LANG']->getLL('returnLink', 1) . '" /></a>';
                 }
-               
+
                 return $buttons;
         }
  }
  
-// Include extension?
+
  if (defined('TYPO3_MODE') && $TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['typo3/show_rechis.php'])  {
         include_once($TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['typo3/show_rechis.php']);
  }
  
  
  
-
-
-
-
-
-
-
-
-
  // Make instance:
  $SOBE = t3lib_div::makeInstance('SC_show_rechis');
  $SOBE->init();
  $SOBE->main();
  $SOBE->printContent();
-?>
+
+?>
+\ No newline at end of file