libraries/header_http.inc.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  *
   5  * @version $Id$
   6  * @package phpMyAdmin
   7  */
   8 if (! defined('PHPMYADMIN')) {
   9     exit;
  10 }
  11
  12 /**
  13  *
  14  */
  15 if (isset($_REQUEST['GLOBALS']) || isset($_FILES['GLOBALS'])) {
  16     die("GLOBALS overwrite attempt");
  17 }
  18
  19 /**
  20  * Sends http headers
  21  */
  22 $GLOBALS['now'] = gmdate('D, d M Y H:i:s') . ' GMT';
  23 /* Prevent against ClickJacking by allowing frames only from same origin */
  24 if (!$GLOBALS['cfg']['AllowThirdPartyFraming']) {
  25     header('X-Frame-Options: SAMEORIGIN');
  26 }
  27 header('Expires: ' . $GLOBALS['now']); // rfc2616 - Section 14.21
  28 header('Last-Modified: ' . $GLOBALS['now']);
  29 header('Cache-Control: no-store, no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0'); // HTTP/1.1
  30 header('Pragma: no-cache'); // HTTP/1.0
  31 if (!defined('IS_TRANSFORMATION_WRAPPER')) {
  32     // Define the charset to be used
  33     header('Content-Type: text/html; charset=' . $GLOBALS['charset']);
  34 }
  35 ?>