lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Security: Backup and restore works even with root empty password

Browse Source
This commit is contained in:
Laurent Destailleur 2008-04-17 10:56:49 +00:00
parent f2a4c90b87
commit 4a439e1c69
2 changed files with 19 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
htdocs/admin/tools/dolibarr_import.php
View File

@ -14,19 +14,15 @@
* You should have received a copy of the GNU General Public License * You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software * along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
* $Id$
* $Source$
*/ */
/** /**
\file htdocs/admin/tools/dolibarr_import.php \file htdocs/admin/tools/dolibarr_import.php
\brief Page import de la base \brief Page import de la base
\version $Revision$ \version $Id$
*/ */
require("./pre.inc.php"); require("./pre.inc.php");
include_once $dolibarr_main_document_root."/lib/databases/".$conf->db->type.".lib.php";
$langs->load("admin"); $langs->load("admin");
$langs->load("other"); $langs->load("other");
@ -115,11 +111,18 @@ function show_checked_option() {
<?php <?php
// Parameteres execution // Parameteres execution
$command=escapeshellarg('mysql'); $command=escapeshellarg('mysql');
//$param=escapeshellarg($dolibarr_main_db_name)." -h ".escapeshellarg($dolibarr_main_db_host)." -u ".escapeshellarg($dolibarr_main_db_user)." -p".escapeshellarg($dolibarr_main_db_pass);
$param=$dolibarr_main_db_name." -h ".$dolibarr_main_db_host." -u ".$dolibarr_main_db_user." -p".$dolibarr_main_db_pass; $param=$dolibarr_main_db_name." -h ".$dolibarr_main_db_host." -u ".$dolibarr_main_db_user;
$paramcrypted=$param;
$paramclear=$param;
if (! empty($dolibarr_main_db_pass))
{
$paramcrypted.=" -p".eregi_replace('.','*',$dolibarr_main_db_pass);
$paramclear.=" -p".$dolibarr_main_db_pass;
}
echo $langs->trans("ImportMySqlDesc"); ?><br> echo $langs->trans("ImportMySqlDesc"); ?><br>
<textarea rows="1" cols="120"><?php echo $langs->trans("ImportMySqlCommand",$command,$param); ?></textarea><br> <textarea rows="1" cols="120"><?php echo $langs->trans("ImportMySqlCommand",$command,$paramcrypted); ?></textarea><br>
</div> </div>
<script type="text/javascript" language="javascript"> <script type="text/javascript" language="javascript">

9
htdocs/admin/tools/export.php
View File

@ -115,8 +115,13 @@ if ($what == 'mysql')
{ {
$param.=" -d"; $param.=" -d";
} }
$paramcrypted=$param." -p".eregi_replace('.','*',$dolibarr_main_db_pass); $paramcrypted=$param;
$paramclear=$param." -p".$dolibarr_main_db_pass; $paramclear=$param;
if (! empty($dolibarr_main_db_pass))
{
$paramcrypted.=" -p".eregi_replace('.','*',$dolibarr_main_db_pass);
$paramclear.=" -p".$dolibarr_main_db_pass;
}
$relativepathdir='/admin/temp'; $relativepathdir='/admin/temp';
$relativepathfile=$relativepathdir.'/'.$file; $relativepathfile=$relativepathdir.'/'.$file;