libraries/header_http.inc.php

   1 <?php
   2 /* vim: set expandtab sw=4 ts=4 sts=4: */
   3 /**
   4  *
   5  * @version $Id$
   6  * @package phpMyAdmin
   7  */
   8 if (! defined('PHPMYADMIN')) {
   9     exit;
  10 }
  11
  12 /**
  13  *
  14  */
  15 if (isset($_REQUEST['GLOBALS']) || isset($_FILES['GLOBALS'])) {
  16     die("GLOBALS overwrite attempt");
  17 }
  18
  19 /**
  20  * Sends http headers
  21  */
  22 $GLOBALS['now'] = gmdate('D, d M Y H:i:s') . ' GMT';
  23 /* Prevent against ClickJacking by allowing frames only from same origin */
  24 if (!$GLOBALS['cfg']['AllowThirdPartyFraming']) {
  25     header('X-Frame-Options: SAMEORIGIN');
  26     header('X-Content-Security-Policy: allow \'self\'; options inline-script eval-script; frame-ancestors \'self\'');
  27 }
  28 header('Expires: ' . $GLOBALS['now']); // rfc2616 - Section 14.21
  29 header('Last-Modified: ' . $GLOBALS['now']);
  30 header('Cache-Control: no-store, no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0'); // HTTP/1.1
  31 header('Pragma: no-cache'); // HTTP/1.0
  32 if (!defined('IS_TRANSFORMATION_WRAPPER')) {
  33     // Define the charset to be used
  34     header('Content-Type: text/html; charset=' . $GLOBALS['charset']);
  35 }
  36 ?>