[cms-users] Overwrite protection + some suggestions

[Roger B. <ro...@sa...>]

I know this cahnge could be done better... but hey, It's something ;^)

Search in file for  "=========" to find changes

I am attaching an edited crm.cgi (3 miniscule changes) that will
disallow upload, generates an error message if a file already exists,
and log any attempt to jump to disallowed path.

I think there should also be a configurable way to limit the hosts that
the script can can validly be run from (limit referers).

Would be nice if the crm generated admin files were kept out of the main
folder (maybe simply created in a separate, parallel, tree structure -
this could be done easily using a configurable path variable prefix in
the crm.cgi?

I noticed the message about coming API stuff but some of above may be
worth doing direct in the pl script anyhow.

Thanks for a nice project :-)

R.