WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Added security check

This commit is contained in:
katagia 2003-05-02 07:59:13 +00:00
parent 35db10e32f
commit f3192b7f12
1 changed files with 30 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
lam/templates/delete.php
View File

@ -33,7 +33,7 @@ echo _('Delete Account');
echo '</title> echo '</title>
</head><body> </head><body>
<link rel="stylesheet" type="text/css" href="../style/delete.css"> <link rel="stylesheet" type="text/css" href="../style/delete.css">
<form action="account.php" method="get"> <form action="delete.php" method="post">
<meta http-equiv="pragma" content="no-cache"> <meta http-equiv="pragma" content="no-cache">
<meta http-equiv="cache-control" content="no-cache"> <meta http-equiv="cache-control" content="no-cache">
<table rules="all" class="delete" width="100%"> <table rules="all" class="delete" width="100%">
@ -41,10 +41,34 @@ echo '</title>
if ($type) { if ($type) {
$DN = str_replace("\'", '',$DN); $DN2 = explode(";", str_replace("\'", '',$DN));
$DN2 = explode(";", $DN); echo '<input name="type5" type="hidden" value="'.$type.'">';
foreach ($DN2 as $dn) { echo '<input name="DN" type="hidden" value="'.$DN.'">';
switch ($type) { switch ($type) {
case 'user':
echo _('Do you really want to delete user(s):');
break;
case 'host':
echo _('Do you really want to delete host(s):');
break;
case 'group':
echo _('Do you really want to delete group(s):');
break;
}
echo '</td></tr>';
foreach ($DN2 as $dn) echo '<tr><td>'.$dn.'</td></tr>';
echo '<br><tr><td>
<input name="delete_yes" type="submit" value="';
echo _('Commit'); echo '"></td><td></td><td>
<input name="delete_no" type="submit" value="';
echo _('Chancel'); echo '">';
}
if ($delete_yes) {
$DN = str_replace("\'", '',$DN);
$DN2 = explode(";", str_replace("\\", '',$DN));
foreach ($DN2 as $dn) {
switch ($type5) {
case 'user': case 'user':
$success = ldap_delete($_SESSION['ldap']->server(), $dn); $success = ldap_delete($_SESSION['ldap']->server(), $dn);
if (!$success) $error = _('Could not delete user: ').$dn; if (!$success) $error = _('Could not delete user: ').$dn;
@ -70,6 +94,9 @@ if ($type) {
echo '</td></tr><tr><td>'; echo '</td></tr><tr><td>';
} }
} }
if ($delete_no) echo _('Nothing was deleted.');
echo '</td></tr>'; echo '</td></tr>';
echo '</form></body></html>'; echo '</form></body></html>';
?> ?>