lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix http header

Browse Source
This commit is contained in:
Laurent Destailleur 2022-07-14 14:59:28 +02:00
parent a26931594c
commit a55ab27c67
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/install/inc.php
View File

@ -195,6 +195,10 @@ if (preg_match('/install\.lock/i', $_SERVER["SCRIPT_FILENAME"])) {
$langs->setDefaultLang('auto'); $langs->setDefaultLang('auto');
} }
$langs->load("install"); $langs->load("install");
header("X-Content-Type-Options: nosniff");
header("X-Frame-Options: SAMEORIGIN"); // Frames allowed only if on same domain (stop some XSS attacks)
print $langs->trans("YouTryInstallDisabledByDirLock"); print $langs->trans("YouTryInstallDisabledByDirLock");
if (!empty($dolibarr_main_url_root)) { if (!empty($dolibarr_main_url_root)) {
print 'Click on following link, <a href="'.$dolibarr_main_url_root.'/admin/index.php?mainmenu=home&leftmenu=setup'.(GETPOSTISSET("login") ? '&username='.urlencode(GETPOST("login")) : '').'">'; print 'Click on following link, <a href="'.$dolibarr_main_url_root.'/admin/index.php?mainmenu=home&leftmenu=setup'.(GETPOSTISSET("login") ? '&username='.urlencode(GETPOST("login")) : '').'">';
@ -216,6 +220,10 @@ if (@file_exists($lockfile)) {
$langs->setDefaultLang('auto'); $langs->setDefaultLang('auto');
} }
$langs->load("install"); $langs->load("install");
header("X-Content-Type-Options: nosniff");
header("X-Frame-Options: SAMEORIGIN"); // Frames allowed only if on same domain (stop some XSS attacks)
print $langs->trans("YouTryInstallDisabledByFileLock"); print $langs->trans("YouTryInstallDisabledByFileLock");
if (!empty($dolibarr_main_url_root)) { if (!empty($dolibarr_main_url_root)) {
print $langs->trans("ClickOnLinkOrRemoveManualy").'<br>'; print $langs->trans("ClickOnLinkOrRemoveManualy").'<br>';