From df7c02eb588a9a5f4b14401ea9bde564132b4e0e Mon Sep 17 00:00:00 2001
From: Tom Schaefer <tom@tomschaefer.org>
Date: Mon, 26 Jul 2010 11:55:01 -0400
Subject: Add filemgr package 	new file:   config/filemgr/file_manager.tmp 
 new file:   config/filemgr/filemgr.inc 	new file:  
 config/filemgr/filemgr.xml 	new file:   config/filemgr/index.tmp 	new
 file:   config/filemgr/rbfmimg/bg_footer.png 	new file:  
 config/filemgr/rbfmimg/bg_header.png 	new file:  
 config/filemgr/rbfmimg/bg_page.png 	new file:  
 config/filemgr/rbfmimg/file_editor_bg.png 	new file:  
 config/filemgr/rbfmimg/folder.png 	new file:  
 config/filemgr/rbfmimg/folder_go.png 	new file:  
 config/filemgr/rbfmimg/folder_up.png 	new file:  
 config/filemgr/rbfmimg/go.png 	new file:  
 config/filemgr/rbfmimg/ico_delete.png 	new file:  
 config/filemgr/rbfmimg/ico_download.png 	new file:  
 config/filemgr/rbfmimg/ico_file.png 	new file:  
 config/filemgr/rbfmimg/ico_html.png 	new file:  
 config/filemgr/rbfmimg/ico_open_as_web.png 	new file:  
 config/filemgr/rbfmimg/ico_php.png 	new file:  
 config/filemgr/rbfmimg/ico_picture.png 	new file:  
 config/filemgr/rbfmimg/ico_rename.png 	new file:  
 config/filemgr/rbfmimg/ico_script_edit.png 	new file:  
 config/filemgr/rbfmimg/ico_use_file.png 	new file:  
 config/filemgr/rbfmimg/ico_use_file_inactive.png 	new file:  
 config/filemgr/rbfmimg/index.html 	new file:  
 config/filemgr/rbfmimg/new.png 	new file:  
 config/filemgr/rbfminc/config.tmp 	new file:  
 config/filemgr/rbfminc/download.tmp 	new file:  
 config/filemgr/rbfminc/file_editor_style.css 	new file:  
 config/filemgr/rbfminc/functions.tmp 	new file:  
 config/filemgr/rbfminc/index.html 	new file:  
 config/filemgr/rbfminc/rename.tmp 	new file:  
 config/filemgr/rbfminc/session.tmp 	modified:   pkg_config.7.xml 
 modified:   pkg_config.8.xml 	new file:   pkg_config.8.xml.amd64~

---
 config/filemgr/rbfminc/config.tmp | 95 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 config/filemgr/rbfminc/config.tmp

(limited to 'config/filemgr/rbfminc/config.tmp')

diff --git a/config/filemgr/rbfminc/config.tmp b/config/filemgr/rbfminc/config.tmp
new file mode 100644
index 00000000..47a7563a
--- /dev/null
+++ b/config/filemgr/rbfminc/config.tmp
@@ -0,0 +1,95 @@
+<?php
+
+
+$initial_folder = "/"; //initial folder
+$only_below = 0; // 0=you can brows all server; 1=you can brows only the $initial_folder and below
+
+//Login info {Please change the initial username and password}
+$username = 'admin';
+$password = 'admin';
+
+
+
+/***********************************/
+// Protect against GLOBALS tricks
+if (isset($_POST['GLOBALS']) || isset($_FILES['GLOBALS']) || isset($_GET['GLOBALS']) || isset($_COOKIE['GLOBALS'])){
+	die("Hacking attempt");
+}
+
+if (isset($_SESSION) && !is_array($_SESSION)){
+	die("Hacking attempt");
+}
+
+if (@ini_get('register_globals') == '1' || strtolower(@ini_get('register_globals')) == 'on'){
+	$not_unset = array('_GET', '_POST', '_COOKIE', 'HTTP_SERVER_VARS', '_SESSION', 'HTTP_ENV_VARS', '_FILES');
+
+	if (!isset($_SESSION) || !is_array($_SESSION)){
+		$_SESSION = array();
+	}
+	$input = array_merge($_GET, $_POST, $_COOKIE, $HTTP_SERVER_VARS, $_SESSION, $HTTP_ENV_VARS, $_FILES);
+
+	unset($input['input']);
+	unset($input['not_unset']);
+
+	while (list($var,) = @each($input)){
+		if (in_array($var, $not_unset)){
+			die('Hacking attempt!');
+		}
+		unset($$var);
+	}
+
+	unset($input);
+}
+
+if( !get_magic_quotes_gpc() ){
+	if( is_array($_GET) ){
+		while( list($k, $v) = each($_GET) ){
+			if( is_array($_GET[$k]) )
+			{
+				while( list($k2, $v2) = each($_GET[$k]) ){
+					$_GET[$k][$k2] = addslashes($v2);
+				}
+				@reset($_GET[$k]);
+			}else{
+				$_GET[$k] = addslashes($v);
+			}
+		}
+		@reset($_GET);
+	}
+
+	if( is_array($_POST) ){
+		while( list($k, $v) = each($_POST) ){
+			if( is_array($_POST[$k]) )
+			{
+				while( list($k2, $v2) = each($_POST[$k]) ){
+					$_POST[$k][$k2] = addslashes($v2);
+				}
+				@reset($_POST[$k]);
+			}else{
+				$_POST[$k] = addslashes($v);
+			}
+		}
+		@reset($_POST);
+	}
+
+	if( is_array($_COOKIE) ){
+		while( list($k, $v) = each($_COOKIE) ){
+			if( is_array($_COOKIE[$k]) ){
+				while( list($k2, $v2) = each($_COOKIE[$k]) ){
+					$_COOKIE[$k][$k2] = addslashes($v2);
+				}
+				@reset($_COOKIE[$k]);
+			}else{
+				$_COOKIE[$k] = addslashes($v);
+			}
+		}
+		@reset($_COOKIE);
+	}
+}
+//END Protect against GLOBALS tricks
+/***********************************/
+//if($username == 'admin' and $password == 'admin'){
+	//$security_issues = "<div align='center' style='color: red;'><b>Security issue</b>: Please change your username or password</div>";
+//}
+$security_issues = "<br />";
+?>
\ No newline at end of file
-- 
cgit v1.2.3