libraries/header_http.inc.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  *
   5  * @package phpMyAdmin
   6  */
   7 if (! defined('PHPMYADMIN')) {
   8     exit;
   9 }
  10
  11 /**
  12  *
  13  */
  14 if (isset($_REQUEST['GLOBALS']) || isset($_FILES['GLOBALS'])) {
  15     die("GLOBALS overwrite attempt");
  16 }
  17
  18 /**
  19  * Sends http headers
  20  */
  21 $GLOBALS['now'] = gmdate('D, d M Y H:i:s') . ' GMT';
  22 /* Prevent against ClickJacking by allowing frames only from same origin */
  23 if (!$GLOBALS['cfg']['AllowThirdPartyFraming']) {
  24     header('X-Frame-Options: SAMEORIGIN');
  25     header('X-Content-Security-Policy: allow \'self\'; options inline-script eval-script; frame-ancestors \'self\'; img-src \'self\' data:; script-src \'self\' www.phpmyadmin.net');
  26 }
  27 PMA_no_cache_header();
  28 if (!defined('IS_TRANSFORMATION_WRAPPER')) {
  29     // Define the charset to be used
  30     header('Content-Type: text/html; charset=utf-8');
  31 }
  32 ?>