extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2025-01-13 01:18:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added authorization against the setup password

Browse Source
This commit is contained in:
sjb4891 2000-09-28 14:28:34 +00:00
parent ed3540db30
commit 89afb762df
3 changed files with 77 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
setup/config.php
View File

@ -17,7 +17,13 @@
include("../header.inc.php"); include("../header.inc.php");
$phpgw_info["server"]["api_dir"] = $phpgw_info["server"]["include_root"]."/phpgwapi"; $phpgw_info["server"]["api_dir"] = $phpgw_info["server"]["include_root"]."/phpgwapi";
// Authorize the user to use setup app
include("setup_auth.inc.php");
// Does not return unless user is authorized
echo "<html><head><title>phpGroupWare Setup</title></head>\n";
echo "<body bgcolor='#ffffff'>\n";
/* Database setup */ /* Database setup */
switch($phpgw_info["server"]["db_type"]){ switch($phpgw_info["server"]["db_type"]){
case "postgresql": case "postgresql":
@ -288,4 +294,5 @@
<td colspan="2" align="center"><input type="submit" name="submit" value="Submit"></td> <td colspan="2" align="center"><input type="submit" name="submit" value="Submit"></td>
</tr> </tr>
</table> </table>
</form> </form>
</body></html>

11
setup/index.php
View File

@ -1,4 +1,4 @@
<? <?php
/**************************************************************************\ /**************************************************************************\
* phpGroupWare * * phpGroupWare *
* http://www.phpgroupware.org * * http://www.phpgroupware.org *
@ -16,6 +16,12 @@
$phpgw_info["server"]["api_dir"] = $phpgw_info["server"]["include_root"]."/phpgwapi"; $phpgw_info["server"]["api_dir"] = $phpgw_info["server"]["include_root"]."/phpgwapi";
// Authorize the user to use setup app
include("setup_auth.inc.php");
// Does not return unless user is authorized
echo "<html><head><title>phpGroupWare Setup</title></head>\n";
echo "<body bgcolor='#ffffff'>\n";
/* Database setup */ /* Database setup */
switch($phpgw_info["server"]["db_type"]){ switch($phpgw_info["server"]["db_type"]){
case "postgresql": case "postgresql":
@ -176,5 +182,6 @@
} }
} }
echo "</body></html>";
//db->disconnect(); //db->disconnect();
?> ?>

59
setup/setup_auth.inc.php Normal file
View File

@ -0,0 +1,59 @@
<?php
/**************************************************************************\
* phpGroupWare *
* http://www.phpgroupware.org *
* -------------------------------------------- *
* This program is free software; you can redistribute it and/or modify it *
* under the terms of the GNU General Public License as published by the *
* Free Software Foundation; either version 2 of the License, or (at your *
* option) any later version. *
\**************************************************************************/
/* $Id$ */
// Include to check user authorization against the
// password in ../header.inc.php to protect all of the setup
// pages from unauthorized use.
function loginForm($err="") {
global $PHP_SELF;
echo "<html><head><title>phpGroupWare Setup - please Login</title></head>\n";
echo "<body bgcolor='#ffffff'>\n";
echo "<table border=\"0\" align=\"center\">\n";
echo " <tr bgcolor=\"486591\">\n";
echo " <td colspan=\"2\"><font color=\"fefefe\">&nbsp;<b>Setup Login</b></font></td>\n";
echo " </tr>\n";
if ($err != "") {
echo " <tr bgcolor='#e6e6e6'><td colspan='2'><font color='#ff0000'>".$err."</font></td></tr>\n";
}
echo " <tr bgcolor=\"e6e6e6\">\n";
echo " <td><form action='".$PHP_SELF."' method='POST'>\n";
echo " <input type='password' name='FormPW' value=''>\n";
echo " <input type='submit' name='Login' value='Login'>\n";
echo " </form></td>\n";
echo " </tr>\n";
echo "</table>\n";
echo "<!-- cookipw = ".$SetupCookie." should be ".$phpgw_info["server"]["config_passwd"]." -->\n";
echo "</body></html>\n";
}
if (isset($FormPW) ) {
if ($FormPW != $phpgw_info["server"]["config_passwd"]) {
loginForm("Invalid password.");
exit;
}
// Valid login, fall through and set the cookie
$SetupCookie = $FormPW;
} else if (isset($SetupCookie)) {
if ($SetupCookie != $phpgw_info["server"]["config_passwd"]) {
setcookie("SetupCookie",""); // scrub the old one
loginForm("Invalid session cookie (cookies must be enabled)");
exit;
}
} else {
loginForm();
exit;
}
// Auth ok.
setcookie("SetupCookie","$SetupCookie");
?>