lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sec: More security on public pages

Browse Source
This commit is contained in:
Laurent Destailleur 2009-07-15 13:02:51 +00:00
parent 3431ebf1ae
commit 9b0c6dd059
2 changed files with 24 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
htdocs/lib/functions.lib.php
View File

@ -1584,32 +1584,34 @@ function restrictedArea($user, $feature='societe', $objectid=0, $dbtablename='',
* \param printheader Affiche avant le header * \param printheader Affiche avant le header
* \remarks L'appel a cette fonction termine le code. * \remarks L'appel a cette fonction termine le code.
*/ */
function accessforbidden($message='',$printheader=1) function accessforbidden($message='',$printheader=1,$printfooter=1,$showonlymessage=0)
{ {
global $user, $langs; global $user, $langs;
$langs->load("other"); $langs->load("other");
if ($printheader && function_exists("llxHeader")) llxHeader(); if ($printheader)
{
if (function_exists("llxHeader")) llxHeader('');
else if (function_exists("llxHeaderVierge")) llxHeaderVierge('');
}
print '<div class="error">'; print '<div class="error">';
if (! $message) print $langs->trans("ErrorForbidden"); if (! $message) print $langs->trans("ErrorForbidden");
else print $message; else print $message;
print '</div>'; print '</div>';
print '<br>'; print '<br>';
if ($user->login) if (empty($showonlymessage))
{ {
print $langs->trans("CurrentLogin").': <font class="error">'.$user->login.'</font><br>'; if ($user->login)
print $langs->trans("ErrorForbidden2",$langs->trans("Home"),$langs->trans("Users")); {
print $langs->trans("CurrentLogin").': <font class="error">'.$user->login.'</font><br>';
print $langs->trans("ErrorForbidden2",$langs->trans("Home"),$langs->trans("Users"));
}
else
{
print $langs->trans("ErrorForbidden3");
}
} }
elseif (! empty($_SERVER["REMOTE_USER"])) if ($printfooter && function_exists("llxFooter")) llxFooter('');
{
print $langs->trans("CurrentLogin").': <font class="error">'.$_SERVER["REMOTE_USER"]."</font><br>";
print $langs->trans("ErrorForbidden2",$langs->trans("Home"),$langs->trans("Users"));
}
else
{
print $langs->trans("ErrorForbidden3");
}
if (function_exists("llxFooter")) llxFooter();
exit(0); exit(0);
} }

7
htdocs/public/demo/index.php
View File

@ -33,6 +33,12 @@ $langs->setDefaultLang($langcode);
$langs->load("main"); $langs->load("main");
$langs->load("other"); $langs->load("other");
// Security check
if (! empty($conf->global->MAIN_DEMO))
{
accessforbidden('Constant MAIN_DEMO must be defined in Home->Setup->Misc to enable the demo entry page',1,1,1);
exit;
}
$demoprofiles=array( $demoprofiles=array(
array('default'=>'-1', 'key'=>'profdemofun','label'=>'DemoFundation', array('default'=>'-1', 'key'=>'profdemofun','label'=>'DemoFundation',
@ -83,6 +89,7 @@ function llxHeaderVierge($title, $head = "")
function llxFooter() function llxFooter()
{ {
print "\n";
print "</body>\n"; print "</body>\n";
print "</html>\n"; print "</html>\n";
} }