File: D:/HostingSpaces/PvdBoogaard/indoorski.nl/backup/oude-site/cms/admin/remote.php
<?php
define('IN_CONTROL_PANEL', true);
require_once(dirname(dirname(__FILE__)) . '/api/iwp.php');
IWP::Set('DebugMode', false);
// A white list of available sections/classes to be called
$whitelist_section = array(
'categories',
'content',
'contenttypes',
'modules',
'module',
'user',
'settings',
'tools',
'auth',
'groups',
'lists',
'layout',
'importer',
'imagemanager',
'maintenance',
'upgrade'
);
if (isset($_GET['section']) && in_array($_GET['section'], $whitelist_section, true)) {
IWP::Set('LangFile', 'admin.common,'.'admin.'.$_GET['section']);
}else{
IWP::Set('LangFile', 'admin.common');
}
IWP::Init('basic,functions,outputbuffer,language,whitelabel,session');
$auth = iwp_admin_auth::getInstance();
if(!$auth->IsLoggedIn()) {
if(isset($_POST['submit_login'])){
$auth->RemoteLogin();
}else{
if(sizeof($_POST) > 1){
iwp_session::Set('__postData', serialize($_POST));
}
if(sizeof($_GET) > 1){
iwp_session::Set('__getData', serialize($_GET));
}
$auth->SendAjaxLoginForm();
}
die();
}else{
$auth->LoadUserData();
}
if(isset($_GET[stricmp('module', '')])){
$module = iwp_validation::FilterAlpha($_GET['module']);
$action = iwp_validation::FilterAlphaNumeric($_GET['action']);
$action = 'Remote'.$action;
iwp_template::getInstance()->Assign('module', $module);
iwp_template::getInstance()->Assign('action', $action);
$modules = iwp_modules::getInstance();
$modules->GetModule($module)->$action();
}elseif(isset($_GET['section'])){
$section = iwp_validation::FilterAlpha($_GET['section']);
$action = iwp_validation::FilterAlphaNumeric($_GET['action']);
$classname = 'iwp_admin_'.$section;
$class = call_user_func(array($classname, 'getInstance'));
iwp_template::getInstance()->Assign('section', $section);
iwp_template::getInstance()->Assign('action', $action);
$action = 'Remote'.$action;
$class->$action();
}else{
die('No Access');
}