lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Hide PHP_AUTH_PW into debugbar

Browse Source
This commit is contained in:
Laurent Destailleur 2023-03-19 11:06:48 +01:00
parent dbf5ebe7ee
commit 6b01edbf01
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
htdocs/admin/system/phpinfo.php
View File

@ -252,6 +252,7 @@ foreach ($phparray as $key => $value) {
if (!is_array($keyvalue)) { if (!is_array($keyvalue)) {
$keytoshow = $keyparam; $keytoshow = $keyparam;
$valtoshow = $keyvalue; $valtoshow = $keyvalue;
// Hide value of session cookies // Hide value of session cookies
if (in_array($keyparam, array('HTTP_COOKIE', 'Cookie', "\$_SERVER['HTTP_COOKIE']", 'Authorization'))) { if (in_array($keyparam, array('HTTP_COOKIE', 'Cookie', "\$_SERVER['HTTP_COOKIE']", 'Authorization'))) {
$valtoshow = '<span class="opacitymedium">'.$langs->trans("Hidden").'</span>'; $valtoshow = '<span class="opacitymedium">'.$langs->trans("Hidden").'</span>';
@ -260,6 +261,10 @@ foreach ($phparray as $key => $value) {
$keytoshow = $keyparam; $keytoshow = $keyparam;
$valtoshow = '<span class="opacitymedium">'.$langs->trans("Hidden").'</span>'; $valtoshow = '<span class="opacitymedium">'.$langs->trans("Hidden").'</span>';
} }
if (preg_match('/'.preg_quote('$_SERVER[\'PHP_AUTH_PW', '/').'/i', $keyparam)) {
$keytoshow = $keyparam;
$valtoshow = '<span class="opacitymedium">'.$langs->trans("Hidden").'</span>';
}
print '<tr class="oddeven">'; print '<tr class="oddeven">';
print '<td>'.$keytoshow.'</td>'; print '<td>'.$keytoshow.'</td>';

8
htdocs/debugbar/class/DataCollector/DolRequestDataCollector.php
View File

@ -51,7 +51,13 @@ class DolRequestDataCollector extends RequestDataCollector
} }
//var_dump($arrayofvalues); //var_dump($arrayofvalues);
} }
if ($var == '_SERVER') {
foreach ($arrayofvalues as $key => $val) {
if (preg_match('/^PHP_AUTH_PW/', $key)) {
$arrayofvalues[$key] = '*****hidden*****';
}
}
}
$data["$".$var] = $this->getDataFormatter()->formatVar($arrayofvalues); $data["$".$var] = $this->getDataFormatter()->formatVar($arrayofvalues);
} }
} }