Hey !!!!!

What if "symbol" is "../../../../../config/databases.yml" ???

Warning !! Security !! Haaa !!

2009/12/18 Alexandru-Emil Lupu <gang.al...@gmail.com>

> sfConfig::set($name, $value) maybe ?
>
>
> On Thu, Dec 17, 2009 at 4:44 PM, ajit <csa...@gmail.com> wrote:
> > Hi all,
> >
> > I have an application where I need to customize the look(Color Scheme
> > which matches the client site) for each client using the single
> > codebase...So what I am doing is I am storing the values in the yml
> > file and from that I am fetching the values.
> >
> > I am doing something like this in the global template:
> >
> > $file = strtolower($sf_request->getParameter('symbol')) . ".yml";
> > $filepath = sfConfig::get('app_file_path') . 'web/uploads/settings/' .
> > $file;
> > if (file_exists($filepath))
> > {
> > $test = sfYaml::load( sfConfig::get('app_file_path') . 'web/uploads/
> > settings/' .$file);
> > }
> > else
> > {
> > $test = sfYaml::load(sfConfig::get('app_file_path') . 'web/uploads/
> > settings/default.yml');
> > }
> > foreach ($test as $a)
> > {
> > $topbar = "#" . $a['color']['topbar'];
> > $footerbar = "#" . $a['color']['footerbar'];
> > $inactivetab = "#" . $a['color']['inactivetab'];
> >
> > $activetab = "#" . $a['color']['activetab'];
> > $activetabtext = "#" . $a['color']['activetabtext'];
> > $menuline = "#" . $a['color']['menuline'];
> > $textcolor = "#" . $a['color']['textcolor'];
> >
> > $postedByBox = "#" . $a['color']['postedByBox'];
> > $questionBox = "#" . $a['color']['questionBox'];
> > $contextBox = "#" . $a['color']['contextBox'];
> > $answerBox = "#" . $a['color']['answerBox'];
> > }
> >
> >
> > Whatever variables I am setting here, I need to access them in the
> > module's templates also...
> >
> > The problem here is I can't access the variables set here in the
> > modules template....( in for ex: modulename/indexSuccess.php)
> >
> > Pls help me how to do that?
> >
> >
> > P.S: I am storing Colors in the variables.
> >
> > Thanks in Advance!
> >
> > Ajit
> >
> > --
> >
> > You received this message because you are subscribed to the Google Groups
> "symfony users" group.
> > To post to this group, send email to symfony-us...@googlegroups.com.
> > To unsubscribe from this group, send email to
> symfony-users+unsubscr...@googlegroups.com<symfony-users%2bunsubscr...@googlegroups.com>
> .
> > For more options, visit this group at
> http://groups.google.com/group/symfony-users?hl=en.
> >
> >
> >
>
>
>
> --
> Have a nice day!
> Alecs
>
> As programmers create bigger & better idiot proof programs, so the
> universe creates bigger & better idiots!
> I am on web:  http://www.alecslupu.ro/
> I am on twitter: http://twitter.com/alecslupu
> I am on linkedIn: http://www.linkedin.com/in/alecslupu
> Tel: (+4)0748.543.798
>
> --
>
> You received this message because you are subscribed to the Google Groups
> "symfony users" group.
> To post to this group, send email to symfony-us...@googlegroups.com.
> To unsubscribe from this group, send email to
> symfony-users+unsubscr...@googlegroups.com<symfony-users%2bunsubscr...@googlegroups.com>
> .
> For more options, visit this group at
> http://groups.google.com/group/symfony-users?hl=en.
>
>
>


-- 
Alexandre Salomé
http://alexandre-salome.fr

--

You received this message because you are subscribed to the Google Groups 
"symfony users" group.
To post to this group, send email to symfony-us...@googlegroups.com.
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en.


Reply via email to