aboutsummaryrefslogtreecommitdiffstats
path: root/config/filemgr/rbfminc/config.tmp
diff options
context:
space:
mode:
authorTom Schaefer <tom@tomschaefer.org>2010-07-26 11:55:01 -0400
committerTom Schaefer <tom@tomschaefer.org>2010-07-26 11:55:01 -0400
commitdf7c02eb588a9a5f4b14401ea9bde564132b4e0e (patch)
treecb3f412ec78ae8b97ac5a245338f407eba4fbd90 /config/filemgr/rbfminc/config.tmp
parent0e9d556a1c497f9f3bf52e710447541325d69ec6 (diff)
downloadpfsense-packages-df7c02eb588a9a5f4b14401ea9bde564132b4e0e.tar.gz
pfsense-packages-df7c02eb588a9a5f4b14401ea9bde564132b4e0e.tar.bz2
pfsense-packages-df7c02eb588a9a5f4b14401ea9bde564132b4e0e.zip
Add filemgr package
new file: config/filemgr/file_manager.tmp new file: config/filemgr/filemgr.inc new file: config/filemgr/filemgr.xml new file: config/filemgr/index.tmp new file: config/filemgr/rbfmimg/bg_footer.png new file: config/filemgr/rbfmimg/bg_header.png new file: config/filemgr/rbfmimg/bg_page.png new file: config/filemgr/rbfmimg/file_editor_bg.png new file: config/filemgr/rbfmimg/folder.png new file: config/filemgr/rbfmimg/folder_go.png new file: config/filemgr/rbfmimg/folder_up.png new file: config/filemgr/rbfmimg/go.png new file: config/filemgr/rbfmimg/ico_delete.png new file: config/filemgr/rbfmimg/ico_download.png new file: config/filemgr/rbfmimg/ico_file.png new file: config/filemgr/rbfmimg/ico_html.png new file: config/filemgr/rbfmimg/ico_open_as_web.png new file: config/filemgr/rbfmimg/ico_php.png new file: config/filemgr/rbfmimg/ico_picture.png new file: config/filemgr/rbfmimg/ico_rename.png new file: config/filemgr/rbfmimg/ico_script_edit.png new file: config/filemgr/rbfmimg/ico_use_file.png new file: config/filemgr/rbfmimg/ico_use_file_inactive.png new file: config/filemgr/rbfmimg/index.html new file: config/filemgr/rbfmimg/new.png new file: config/filemgr/rbfminc/config.tmp new file: config/filemgr/rbfminc/download.tmp new file: config/filemgr/rbfminc/file_editor_style.css new file: config/filemgr/rbfminc/functions.tmp new file: config/filemgr/rbfminc/index.html new file: config/filemgr/rbfminc/rename.tmp new file: config/filemgr/rbfminc/session.tmp modified: pkg_config.7.xml modified: pkg_config.8.xml new file: pkg_config.8.xml.amd64~
Diffstat (limited to 'config/filemgr/rbfminc/config.tmp')
-rw-r--r--config/filemgr/rbfminc/config.tmp95
1 files changed, 95 insertions, 0 deletions
diff --git a/config/filemgr/rbfminc/config.tmp b/config/filemgr/rbfminc/config.tmp
new file mode 100644
index 00000000..47a7563a
--- /dev/null
+++ b/config/filemgr/rbfminc/config.tmp
@@ -0,0 +1,95 @@
+<?php
+
+
+$initial_folder = "/"; //initial folder
+$only_below = 0; // 0=you can brows all server; 1=you can brows only the $initial_folder and below
+
+//Login info {Please change the initial username and password}
+$username = 'admin';
+$password = 'admin';
+
+
+
+/***********************************/
+// Protect against GLOBALS tricks
+if (isset($_POST['GLOBALS']) || isset($_FILES['GLOBALS']) || isset($_GET['GLOBALS']) || isset($_COOKIE['GLOBALS'])){
+ die("Hacking attempt");
+}
+
+if (isset($_SESSION) && !is_array($_SESSION)){
+ die("Hacking attempt");
+}
+
+if (@ini_get('register_globals') == '1' || strtolower(@ini_get('register_globals')) == 'on'){
+ $not_unset = array('_GET', '_POST', '_COOKIE', 'HTTP_SERVER_VARS', '_SESSION', 'HTTP_ENV_VARS', '_FILES');
+
+ if (!isset($_SESSION) || !is_array($_SESSION)){
+ $_SESSION = array();
+ }
+ $input = array_merge($_GET, $_POST, $_COOKIE, $HTTP_SERVER_VARS, $_SESSION, $HTTP_ENV_VARS, $_FILES);
+
+ unset($input['input']);
+ unset($input['not_unset']);
+
+ while (list($var,) = @each($input)){
+ if (in_array($var, $not_unset)){
+ die('Hacking attempt!');
+ }
+ unset($$var);
+ }
+
+ unset($input);
+}
+
+if( !get_magic_quotes_gpc() ){
+ if( is_array($_GET) ){
+ while( list($k, $v) = each($_GET) ){
+ if( is_array($_GET[$k]) )
+ {
+ while( list($k2, $v2) = each($_GET[$k]) ){
+ $_GET[$k][$k2] = addslashes($v2);
+ }
+ @reset($_GET[$k]);
+ }else{
+ $_GET[$k] = addslashes($v);
+ }
+ }
+ @reset($_GET);
+ }
+
+ if( is_array($_POST) ){
+ while( list($k, $v) = each($_POST) ){
+ if( is_array($_POST[$k]) )
+ {
+ while( list($k2, $v2) = each($_POST[$k]) ){
+ $_POST[$k][$k2] = addslashes($v2);
+ }
+ @reset($_POST[$k]);
+ }else{
+ $_POST[$k] = addslashes($v);
+ }
+ }
+ @reset($_POST);
+ }
+
+ if( is_array($_COOKIE) ){
+ while( list($k, $v) = each($_COOKIE) ){
+ if( is_array($_COOKIE[$k]) ){
+ while( list($k2, $v2) = each($_COOKIE[$k]) ){
+ $_COOKIE[$k][$k2] = addslashes($v2);
+ }
+ @reset($_COOKIE[$k]);
+ }else{
+ $_COOKIE[$k] = addslashes($v);
+ }
+ }
+ @reset($_COOKIE);
+ }
+}
+//END Protect against GLOBALS tricks
+/***********************************/
+//if($username == 'admin' and $password == 'admin'){
+ //$security_issues = "<div align='center' style='color: red;'><b>Security issue</b>: Please change your username or password</div>";
+//}
+$security_issues = "<br />";
+?> \ No newline at end of file