From e59acdfc990b89cb5e28daeaf74699127144c349 Mon Sep 17 00:00:00 2001
From: dweeves <dweeves@gmail.com>
Date: Wed, 4 Nov 2015 01:03:24 +0100
Subject: [PATCH] add security check on all relevant scripts

---
 magmi/web/magmi_cancel.php         | 1 +
 magmi/web/magmi_chooseprofile.php  | 1 +
 magmi/web/magmi_config_setup.php   | 1 +
 magmi/web/magmi_import_run.php     | 1 +
 magmi/web/magmi_profile_config.php | 1 +
 magmi/web/magmi_profile_panel.php  | 1 +
 magmi/web/magmi_progress.php       | 1 +
 magmi/web/magmi_saveconfig.php     | 1 +
 magmi/web/magmi_saveprofile.php    | 1 +
 magmi/web/progress_details.php     | 1 +
 magmi/web/trace_details.php        | 1 +
 11 files changed, 11 insertions(+)

diff --git a/magmi/web/magmi_cancel.php b/magmi/web/magmi_cancel.php
index 11d47083..b5d220bb 100644
--- a/magmi/web/magmi_cancel.php
+++ b/magmi/web/magmi_cancel.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 header('Pragma: public'); // required
 header('Expires: -1'); // no cache
 header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
diff --git a/magmi/web/magmi_chooseprofile.php b/magmi/web/magmi_chooseprofile.php
index aa792b5b..20150996 100644
--- a/magmi/web/magmi_chooseprofile.php
+++ b/magmi/web/magmi_chooseprofile.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 require_once("../inc/magmi_config.php");
 
 $currentprofile = $_REQUEST["profile"];
diff --git a/magmi/web/magmi_config_setup.php b/magmi/web/magmi_config_setup.php
index 25f1ff72..63906918 100755
--- a/magmi/web/magmi_config_setup.php
+++ b/magmi/web/magmi_config_setup.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 require_once("magmi_config.php");
 require_once("magmi_statemanager.php");
 require_once("dbhelper.class.php");
diff --git a/magmi/web/magmi_import_run.php b/magmi/web/magmi_import_run.php
index d487d28f..2049b846 100644
--- a/magmi/web/magmi_import_run.php
+++ b/magmi/web/magmi_import_run.php
@@ -1,4 +1,5 @@
 	<?php
+    require_once("security.php");
 ini_set('gpc_magic_quotes', 0);
     require_once("security.php");
 $profile = isset($_REQUEST["profile"]) ? strip_tags($_REQUEST["profile"]) : 'default';
diff --git a/magmi/web/magmi_profile_config.php b/magmi/web/magmi_profile_config.php
index 057ad1f3..086424a9 100644
--- a/magmi/web/magmi_profile_config.php
+++ b/magmi/web/magmi_profile_config.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 require_once("magmi_config.php");
 $conf = Magmi_Config::getInstance();
 $conf->load();
diff --git a/magmi/web/magmi_profile_panel.php b/magmi/web/magmi_profile_panel.php
index 123f439b..f558572c 100644
--- a/magmi/web/magmi_profile_panel.php
+++ b/magmi/web/magmi_profile_panel.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 if (isset($_REQUEST["profile"])) {
     $profile = strip_tags($_REQUEST["profile"]);
 } else {
diff --git a/magmi/web/magmi_progress.php b/magmi/web/magmi_progress.php
index 5757c044..39a49b4f 100755
--- a/magmi/web/magmi_progress.php
+++ b/magmi/web/magmi_progress.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 require_once("../inc/magmi_statemanager.php");
 require_once("progress_parser.php");
 
diff --git a/magmi/web/magmi_saveconfig.php b/magmi/web/magmi_saveconfig.php
index fb00cd45..4ee29c17 100755
--- a/magmi/web/magmi_saveconfig.php
+++ b/magmi/web/magmi_saveconfig.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 require_once("../inc/magmi_config.php");
 $conf = Magmi_Config::getInstance();
 if ($conf->save($_POST)) {
diff --git a/magmi/web/magmi_saveprofile.php b/magmi/web/magmi_saveprofile.php
index aa3cc2c9..49d33f04 100644
--- a/magmi/web/magmi_saveprofile.php
+++ b/magmi/web/magmi_saveprofile.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 $profile = $_REQUEST["profile"];
 $dslist = $_REQUEST["PLUGINS_DATASOURCES:class"];
 $genlist = $_REQUEST["PLUGINS_GENERAL:classes"];
diff --git a/magmi/web/progress_details.php b/magmi/web/progress_details.php
index b6df1828..8a924bd1 100644
--- a/magmi/web/progress_details.php
+++ b/magmi/web/progress_details.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 session_start();
 $key = $_REQUEST["key"];
 $data = $_SESSION["log_$key"];
diff --git a/magmi/web/trace_details.php b/magmi/web/trace_details.php
index a67dc344..e097a826 100644
--- a/magmi/web/trace_details.php
+++ b/magmi/web/trace_details.php
@@ -1,4 +1,5 @@
 <?php
+require_once("security.php");
 require_once("../inc/magmi_statemanager.php");
 $tid = $_REQUEST["traceid"];
 $tracefile = Magmi_StateManager::getTraceFile();