| 11 |
- |
1 |
<?php
|
| 13 |
- |
2 |
if (substr_count($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip')) ob_start("ob_gzhandler"); else ob_start();
|
|
|
3 |
|
|
|
4 |
if ($_SERVER["SERVER_NAME"] == "www.findcheapmusic.com") {
|
|
|
5 |
header("Strict-Transport-Security: max-age=31536000; includeSubDomains; preload");
|
|
|
6 |
header("X-Content-Type-Options: nosniff");
|
|
|
7 |
header("X-XSS-Protection: 1; mode=block");
|
|
|
8 |
header("Access-Control-Allow-Origin: *");
|
|
|
9 |
header("Referrer-Policy: no-referrer");
|
|
|
10 |
header("X-Frame-Options: SAMEORIGIN");
|
|
|
11 |
header("Set-Cookie: ^(.*)$ $1;HttpOnly;Secure");
|
|
|
12 |
header("Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'unsafe-inline'; style-src 'unsafe-inline';frame-ancestors 'self'");
|
|
|
13 |
}
|
|
|
14 |
|
| 11 |
- |
15 |
include_once('php/sessions_db.php');
|
|
|
16 |
include_once('php/cryptor.php');
|
|
|
17 |
include_once('php/tools.php');
|
|
|
18 |
|
|
|
19 |
error_reporting(E_ALL);
|
|
|
20 |
|
|
|
21 |
$configFile = parse_ini_file("../MyFiles/config/cheapmusic.ini",true);
|
|
|
22 |
$crypt = Cryptor::getInstance($configFile['cryptor']);
|
|
|
23 |
$tmpSessionTab = (isset($_POST["sessionTab"]) && $_POST["sessionTab"] > 0 ? $_POST["sessionTab"] : null);
|
|
|
24 |
$handler = MySessionHandler::getInstance($tmpSessionTab, $configFile['mysqli']);
|
|
|
25 |
unset($configFile);
|
|
|
26 |
|
|
|
27 |
ini_set("session.cookie_httponly", 1);
|
|
|
28 |
ini_set("session.cookie_secure", 1);
|
|
|
29 |
session_set_save_handler($handler, true);
|
|
|
30 |
session_start();
|
|
|
31 |
|
|
|
32 |
initSessionVariables();
|
|
|
33 |
|
|
|
34 |
if ($_SERVER["REQUEST_METHOD"] == "POST") {
|
|
|
35 |
if (in_array($_POST["submit"], $buttonArr)) {
|
|
|
36 |
$_SESSION["currentView"] = $_POST["submit"];
|
|
|
37 |
|
|
|
38 |
filterResults();
|
|
|
39 |
echo printTableHeader();
|
|
|
40 |
echo buildTable();
|
|
|
41 |
}
|
|
|
42 |
}
|