lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Security] Detect lockfile even without configuration

Browse Source
This commit is contained in:
Raphaël Doursenaud 2016-01-08 11:57:18 +01:00
parent 0eae624a60
commit 4d8a9abdbc
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/install/inc.php
View File

@ -174,8 +174,14 @@ if (preg_match('/install.lock/i',$_SERVER["SCRIPT_FILENAME"]))
} }
exit; exit;
} }
$lockfile = DOL_DATA_ROOT . '/install.lock'; $lockfile = DOL_DATA_ROOT . '/install.lock';
if (constant('DOL_DATA_ROOT') && file_exists($lockfile)) if (constant(DOL_DATA_ROOT) === null) {
// We don't have a configuration file yet
// Try to detect any lockfile in the default documents path
$lockfile = '../../documents/install.lock';
}
if (@file_exists($lockfile))
{ {
print 'Install pages have been disabled for security reason (by lock file install.lock into dolibarr root directory).<br>'; print 'Install pages have been disabled for security reason (by lock file install.lock into dolibarr root directory).<br>';
if (! empty($dolibarr_main_url_root)) if (! empty($dolibarr_main_url_root))