From 17dd7ff3d767c3de7684153f084b3431dcd38240 Mon Sep 17 00:00:00 2001 From: Chris Buechler Date: Sun, 9 Jan 2011 22:45:21 -0500 Subject: allow 127.0.0.1 and localhost for HTTP_REFERER checks --- etc/inc/auth.inc | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'etc/inc/auth.inc') diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc index 60912f7..c619004 100644 --- a/etc/inc/auth.inc +++ b/etc/inc/auth.inc @@ -130,6 +130,10 @@ if(function_exists("display_error_form") && !isset($config['system']['webgui'][' break; } } + if($referrer_host == "127.0.0.1" || $referrer_host == "localhost") { + // allow SSH port forwarded connections and links from localhost + $found_host = true; + } } } if($found_host == false) { -- cgit v1.1 From ee4fc984e1169a180457b3a10e011fab04fd0f31 Mon Sep 17 00:00:00 2001 From: Ermal Date: Wed, 26 Jan 2011 10:17:31 +0000 Subject: Silence warnings. --- etc/inc/auth.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'etc/inc/auth.inc') diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc index c619004..805ea44 100644 --- a/etc/inc/auth.inc +++ b/etc/inc/auth.inc @@ -410,7 +410,7 @@ function local_user_set(& $user) { /* create user directory if required */ if (!is_dir($user_home)) { mkdir($user_home, 0700); - mwexec("cp /root/.* {$home_base}/"); + mwexec("/bin/cp /root/.* {$home_base}/", true); } chown($user_home, $user_name); chgrp($user_home, $user_group); @@ -1313,4 +1313,4 @@ function session_auth() { return true; } -?> \ No newline at end of file +?> -- cgit v1.1