* @return    CI_Security
     */
    public function csrf_set_cookie()
    {
        $expire = time() + $this->_csrf_expire;
        $secure_cookie = (bool) config_item('cookie_secure');
 
        if ($secure_cookie && ! is_https())
        {
            return FALSE;
        }
 
        setcookie(
            $this->_csrf_cookie_name,
            $this->_csrf_hash,
            $expire,
            config_item('cookie_path'),
            config_item('cookie_domain'),
            $secure_cookie,
            config_item('cookie_httponly')
        );
        log_message('info', 'CSRF cookie sent');
 
        return $this;
    }
 
    // --------------------------------------------------------------------
 
    /**
     * Show CSRF Error
     *
     * @return    void
     */
    public function csrf_show_error()
    {
        show_error('The action you have requested is not allowed.', 403);
    }
 
    // --------------------------------------------------------------------
 

        }
 
        $this->charset = strtoupper(config_item('charset'));
 
        log_message('info', 'Security Class Initialized');
    }
 
    // --------------------------------------------------------------------
 
    /**
     * CSRF Verify
     *
     * @return    CI_Security
     */
    public function csrf_verify()
    {
        // If it's not a POST request we will set the CSRF cookie
        if (strtoupper($_SERVER['REQUEST_METHOD']) !== 'POST')
        {
            return $this->csrf_set_cookie();
        }
 
        // Check if URI has been whitelisted from CSRF checks
        if ($exclude_uris = config_item('csrf_exclude_uris'))
        {
            $uri = load_class('URI', 'core');
            foreach ($exclude_uris as $excluded)
            {
                if (preg_match('#^'.$excluded.'$#i'.(UTF8_ENABLED ? 'u' : ''), $uri->uri_string()))
                {
                    return $this;
                }
            }
        }
 
        // Check CSRF token validity, but don't error on mismatch just yet - we'll want to regenerate
        $valid = isset($_POST[$this->_csrf_token_name], $_COOKIE[$this->_csrf_cookie_name])
            && is_string($_POST[$this->_csrf_token_name]) && is_string($_COOKIE[$this->_csrf_cookie_name])
            && hash_equals($_POST[$this->_csrf_token_name], $_COOKIE[$this->_csrf_cookie_name]);
 

        $this->_allow_get_array        = (config_item('allow_get_array') !== FALSE);
        $this->_enable_xss        = (config_item('global_xss_filtering') === TRUE);
        $this->_enable_csrf        = (config_item('csrf_protection') === TRUE);
        $this->_standardize_newlines    = (bool) config_item('standardize_newlines');
 
        $this->security =& load_class('Security', 'core');
 
        // Do we need the UTF-8 class?
        if (UTF8_ENABLED === TRUE)
        {
            $this->uni =& load_class('Utf8', 'core');
        }
 
        // Sanitize global arrays
        $this->_sanitize_globals();
 
        // CSRF Protection check
        if ($this->_enable_csrf === TRUE && ! is_cli())
        {
            $this->security->csrf_verify();
        }
 
        log_message('info', 'Input Class Initialized');
    }
 
    // --------------------------------------------------------------------
 
    /**
     * Fetch from array
     *
     * Internal method used to retrieve values from global arrays.
     *
     * @param    array    &$array        $_GET, $_POST, $_COOKIE, $_SERVER, etc.
     * @param    mixed    $index        Index for item to be fetched from $array
     * @param    bool    $xss_clean    Whether to apply XSS filtering
     * @return    mixed
     */
    protected function _fetch_from_array(&$array, $index = NULL, $xss_clean = NULL)
    {
        is_bool($xss_clean) OR $xss_clean = $this->_enable_xss;

                require_once(APPPATH.$directory.'/'.$name.'.php');
            }
        }
 
        // Did we find the class?
        if ($name === FALSE)
        {
            // Note: We use exit() rather than show_error() in order to avoid a
            // self-referencing loop with the Exceptions class
            set_status_header(503);
            echo 'Unable to locate the specified class: '.$class.'.php';
            exit(5); // EXIT_UNK_CLASS
        }
 
        // Keep track of what we just loaded
        is_loaded($class);
 
        $_classes[$class] = isset($param)
            ? new $name($param)
            : new $name();
        return $_classes[$class];
    }
}
 
// --------------------------------------------------------------------
 
if ( ! function_exists('is_loaded'))
{
    /**
     * Keeps track of which libraries have been loaded. This function is
     * called by the load_class() function above
     *
     * @param    string
     * @return    array
     */
    function &is_loaded($class = '')
    {
        static $_is_loaded = array();
 
        if ($class !== '')

 * ------------------------------------------------------
 */
    if ($EXT->call_hook('cache_override') === FALSE && $OUT->_display_cache($CFG, $URI) === TRUE)
    {
        exit;
    }
 
/*
 * -----------------------------------------------------
 * Load the security class for xss and csrf support
 * -----------------------------------------------------
 */
    $SEC =& load_class('Security', 'core');
 
/*
 * ------------------------------------------------------
 *  Load the Input class and sanitize globals
 * ------------------------------------------------------
 */
    $IN    =& load_class('Input', 'core');
 
/*
 * ------------------------------------------------------
 *  Load the Language class
 * ------------------------------------------------------
 */
    $LANG =& load_class('Lang', 'core');
 
/*
 * ------------------------------------------------------
 *  Load the app controller and local controller
 * ------------------------------------------------------
 *
 */
    // Load the base controller class
    require_once BASEPATH.'core/Controller.php';
 
    /**
     * Reference to the CI_Controller method.
     *

            DIRECTORY_SEPARATOR.DIRECTORY_SEPARATOR
        );
    }
    else
    {
        header('HTTP/1.1 503 Service Unavailable.', TRUE, 503);
        echo 'Your view folder path does not appear to be set correctly. Please open the following file and correct this: '.SELF;
        exit(3); // EXIT_CONFIG
    }
 
    define('VIEWPATH', $view_folder.DIRECTORY_SEPARATOR);
 
/*
 * --------------------------------------------------------------------
 * LOAD THE BOOTSTRAP FILE
 * --------------------------------------------------------------------
 *
 * And away we go...
 */
require_once BASEPATH.'core/CodeIgniter.php';