WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fixed input checks

This commit is contained in:
Roland Gruber 2006-07-08 17:50:19 +00:00
parent 2dc17444c0
commit 181e0fe51b
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lam/templates/config/profmanage.php
View File

@ -69,7 +69,7 @@ if ($_POST['submit']) {
} }
// add new profile // add new profile
elseif ($_POST['action'] == "add") { elseif ($_POST['action'] == "add") {
if (eregi("^[a-z0-9\-_]+$", $_POST['addprofile']) && !in_array($_POST['addprofile'], getConfigProfiles())) { if (eregi("^[a-z0-9_-]+$", $_POST['addprofile']) && !in_array($_POST['addprofile'], getConfigProfiles())) {
// check profile password // check profile password
if ($_POST['addpassword'] && $_POST['addpassword2'] && ($_POST['addpassword'] == $_POST['addpassword2'])) { if ($_POST['addpassword'] && $_POST['addpassword2'] && ($_POST['addpassword'] == $_POST['addpassword2'])) {
// create new profile file // create new profile file
@ -91,7 +91,7 @@ if ($_POST['submit']) {
} }
// rename profile // rename profile
elseif ($_POST['action'] == "rename") { elseif ($_POST['action'] == "rename") {
if (eregi("^[a-z0-9\-_]+$", $_POST['renfilename']) && !in_array($_POST['renprofile'], getConfigProfiles())) { if (eregi("^[a-z0-9_-]+$", $_POST['renfilename']) && !in_array($_POST['renfilename'], getConfigProfiles())) {
if (rename("../../config/" . $_POST['oldfilename'] . ".conf", if (rename("../../config/" . $_POST['oldfilename'] . ".conf",
"../../config/" . $_POST['renfilename'] . ".conf")) { "../../config/" . $_POST['renfilename'] . ".conf")) {
$msg = _("Renamed profile."); $msg = _("Renamed profile.");
@ -102,7 +102,7 @@ if ($_POST['submit']) {
} }
// delete profile // delete profile
elseif ($_POST['action'] == "delete") { elseif ($_POST['action'] == "delete") {
if (@unlink("../../config/" . $_POST['delfilename'] . ".conf")) { if (eregi("^[a-z0-9_-]+$", $_POST['delfilename']) && @unlink("../../config/" . $_POST['delfilename'] . ".conf")) {
$msg = _("Profile deleted."); $msg = _("Profile deleted.");
} }
else $error = _("Unable to delete profile!"); else $error = _("Unable to delete profile!");
@ -126,8 +126,8 @@ if ($_POST['submit']) {
} }
// print messages // print messages
if ($error || $msg) { if ($error || $msg) {
if ($error) StatusMessage("ERROR", "", $error); if ($error) StatusMessage("ERROR", $error);
if ($msg) StatusMessage("INFO", "", $msg); if ($msg) StatusMessage("INFO", $msg);
} }
else exit; else exit;
} }