From 6c001bfbdebbae875d81dc0fa8be310d52e9dff0 Mon Sep 17 00:00:00 2001 From: tomas Date: Sun, 20 Feb 2005 17:11:03 +0000 Subject: [PATCH] Several security things in webspace. --- livesupport/modules/storageServer/var/html/index.php | 5 ++--- livesupport/modules/storageServer/var/index.php | 6 +++--- livesupport/modules/storageServer/var/install/getGname.php | 4 ++-- livesupport/modules/storageServer/var/install/getPwd.php | 4 ++-- livesupport/modules/storageServer/var/install/index.php | 7 +++---- livesupport/modules/storageServer/var/tests/index.php | 7 +++---- livesupport/modules/storageServer/var/xmlrpc/index.php | 7 +++---- 7 files changed, 18 insertions(+), 22 deletions(-) diff --git a/livesupport/modules/storageServer/var/html/index.php b/livesupport/modules/storageServer/var/html/index.php index 33f221d4f..76bb708e3 100644 --- a/livesupport/modules/storageServer/var/html/index.php +++ b/livesupport/modules/storageServer/var/html/index.php @@ -23,12 +23,11 @@ Author : $Author: tomas $ - Version : $Revision: 1.1 $ + Version : $Revision: 1.2 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/html/Attic/index.php,v $ ------------------------------------------------------------------------------*/ header ("location: gbHtmlLogin.php"); -die; - +exit; ?> diff --git a/livesupport/modules/storageServer/var/index.php b/livesupport/modules/storageServer/var/index.php index fd8e24597..850bb5ca3 100644 --- a/livesupport/modules/storageServer/var/index.php +++ b/livesupport/modules/storageServer/var/index.php @@ -23,11 +23,11 @@ Author : $Author: tomas $ - Version : $Revision: 1.2 $ + Version : $Revision: 1.3 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/index.php,v $ ------------------------------------------------------------------------------*/ -header ("location: html/gbHtmlLogin.php"); +header ("location: html/"); exit; /* ?> @@ -36,7 +36,7 @@ exit;

StorageServer module


-HTML client
+HTML client
XmlRpc test
Test
diff --git a/livesupport/modules/storageServer/var/install/getGname.php b/livesupport/modules/storageServer/var/install/getGname.php index 821ee2604..22a819ef4 100644 --- a/livesupport/modules/storageServer/var/install/getGname.php +++ b/livesupport/modules/storageServer/var/install/getGname.php @@ -23,7 +23,7 @@ Author : $Author: tomas $ - Version : $Revision: 1.3 $ + Version : $Revision: 1.4 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/install/getGname.php,v $ ------------------------------------------------------------------------------*/ @@ -35,5 +35,5 @@ header("Content-type: text/plain"); $egid = posix_getegid(); $info = posix_getgrgid($egid); - echo $info['name']; + if($_SERVER["REMOTE_ADDR"] == "127.0.0.1") echo $info['name']; ?> \ No newline at end of file diff --git a/livesupport/modules/storageServer/var/install/getPwd.php b/livesupport/modules/storageServer/var/install/getPwd.php index d9b0bdaed..13aae770a 100644 --- a/livesupport/modules/storageServer/var/install/getPwd.php +++ b/livesupport/modules/storageServer/var/install/getPwd.php @@ -23,7 +23,7 @@ Author : $Author: tomas $ - Version : $Revision: 1.1 $ + Version : $Revision: 1.2 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/install/getPwd.php,v $ ------------------------------------------------------------------------------*/ @@ -33,5 +33,5 @@ *----------------------------------------------------------------------------*/ header("Content-type: text/plain"); - echo `pwd`; + if($_SERVER["REMOTE_ADDR"] == "127.0.0.1") echo `pwd`; ?> \ No newline at end of file diff --git a/livesupport/modules/storageServer/var/install/index.php b/livesupport/modules/storageServer/var/install/index.php index e0f92e930..cb503b091 100644 --- a/livesupport/modules/storageServer/var/install/index.php +++ b/livesupport/modules/storageServer/var/install/index.php @@ -23,12 +23,11 @@ Author : $Author: tomas $ - Version : $Revision: 1.1 $ + Version : $Revision: 1.2 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/install/index.php,v $ ------------------------------------------------------------------------------*/ -header ("location: ../index.php"); -die; - +header ("location: ../"); +exit; ?> diff --git a/livesupport/modules/storageServer/var/tests/index.php b/livesupport/modules/storageServer/var/tests/index.php index a95cd977e..65c153c03 100644 --- a/livesupport/modules/storageServer/var/tests/index.php +++ b/livesupport/modules/storageServer/var/tests/index.php @@ -23,12 +23,11 @@ Author : $Author: tomas $ - Version : $Revision: 1.1 $ + Version : $Revision: 1.2 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/tests/index.php,v $ ------------------------------------------------------------------------------*/ -header ("location: ../index.php"); -die; - +header ("location: ../"); +exit; ?> diff --git a/livesupport/modules/storageServer/var/xmlrpc/index.php b/livesupport/modules/storageServer/var/xmlrpc/index.php index eabc310c2..57a0bba2d 100644 --- a/livesupport/modules/storageServer/var/xmlrpc/index.php +++ b/livesupport/modules/storageServer/var/xmlrpc/index.php @@ -23,12 +23,11 @@ Author : $Author: tomas $ - Version : $Revision: 1.1 $ + Version : $Revision: 1.2 $ Location : $Source: /home/paul/cvs2svn-livesupport/newcvsrepo/livesupport/modules/storageServer/var/xmlrpc/index.php,v $ ------------------------------------------------------------------------------*/ -header ("location: ../index.php"); -die; - +header ("location: xrLocStor.php"); +exit; ?>