lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix test pages

Browse Source
This commit is contained in:
Laurent Destailleur 2021-02-19 15:46:59 +01:00
parent e9f9c46cd6
commit 0f38b189df
2 changed files with 14 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
htdocs/public/test/test_csrf.php
View File

@ -3,14 +3,16 @@
?> ?>
This is a form to test a CSRF.<br> This is a form to test if a CSRF exists into a Dolibarr page.<br>
<br> <br>
Open this form into a Virtual server A.<br> - Change url to send request to into this file (server B, hard coded page)<br>
Change url to send request to into file to send request to virtual server B.<br> - Open this form into a virtual server A.<br>
- Send the request to the virtual server B by clicking submit.<br>
- Check that Anticsrf protection is triggered.<br>
<br> <br>
<?php <?php
$urltosendrequest = "http://localhostgit/dolibarr_dev/htdocs/user/group/card.php"; $urltosendrequest = "http://127.0.0.1/dolibarr/htdocs/user/group/card.php";
print 'urltosendrequest = '.$urltosendrequest.'<br><br>'; print 'urltosendrequest = '.$urltosendrequest.'<br><br>';
?> ?>

15
htdocs/public/test/test_sessionlock.php
View File

@ -17,13 +17,14 @@ if (!defined("NOLOGIN")) define("NOLOGIN", '1'); // If this page is publi
// TODO We can close session with session_write_close() as soon as we just need read access everywhere in code. // TODO We can close session with session_write_close() as soon as we just need read access everywhere in code.
if (!defined("NOSESSION")) define("NOSESSION", '1'); if (!defined("NOSESSION")) define("NOSESSION", '1');
print "Legend:<br>\n";
print PHP_SESSION_DISABLED; print 'PHP_SESSION_DISABLED='.PHP_SESSION_DISABLED."<br>\n";
print PHP_SESSION_NONE; print 'PHP_SESSION_NONE='.PHP_SESSION_NONE."<br>\n";
print PHP_SESSION_ACTIVE; print 'PHP_SESSION_ACTIVE='.PHP_SESSION_ACTIVE."<br>\n";
print '<br>'; print '<br>';
print session_status(); print 'session_status='.session_status().' (before main.inc.php)';
print '<br>';
require '../../main.inc.php'; require '../../main.inc.php';
@ -33,11 +34,11 @@ if ($dolibarr_main_prod) {
} }
*/ */
print session_status(); print 'session_status='.session_status().' (after main.inc.php)';
print '<br>'; print '<br>';
//print 'a'.$_SESSION['disablemodules'].'b'; //print 'a'.$_SESSION['disablemodules'].'b';
print 'This page is visible. It means you are not locked by another page called in same session.'; print "\n<br>This page is visible. It means you are not locked by another page called in same session.";
//session_write_close(); //session_write_close();