|
From: Bart v. B. <ba...@us...> - 2002-02-16 10:35:45
|
Update of /cvsroot/phpbb/phpBB2/develop
In directory usw-pr-cvs1:/tmp/cvs-serv2306
Modified Files:
bbcode_conversion.php benchmark.php convert_avatars.php
convert_bbcodeuid.php convert_conf.php convert_privmsgs.php
convert_sigs.php convert_user_regdates.php
most_users_update.php nuke-db.php search_fill.php
Log Message:
Fixed some security problems for those people that didn't remove or disable the /develop/ dir in their CVS install
Index: bbcode_conversion.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/bbcode_conversion.php,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** bbcode_conversion.php 2 May 2001 17:46:45 -0000 1.3
--- bbcode_conversion.php 16 Feb 2002 10:35:40 -0000 1.4
***************
*** 1,5 ****
<?php
/***************************************************************************
! * config.php
* -------------------
* begin : Tuesday, March 20, 2001
--- 1,5 ----
<?php
/***************************************************************************
! * bbcode_conversion.php
* -------------------
* begin : Tuesday, March 20, 2001
***************
*** 22,25 ****
--- 22,38 ----
*
***************************************************************************/
+
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
include('../extension.inc');
***************
*** 203,205 ****
! ?>
\ No newline at end of file
--- 216,218 ----
! ?>
Index: benchmark.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/benchmark.php,v
retrieving revision 1.5
retrieving revision 1.6
diff -C2 -r1.5 -r1.6
*** benchmark.php 5 Oct 2001 20:01:54 -0000 1.5
--- benchmark.php 16 Feb 2002 10:35:40 -0000 1.6
***************
*** 1,3 ****
--- 1,18 ----
<?php
+
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
$phpbb_root_path = "../";
include($phpbb_root_path . 'extension.inc');
Index: convert_avatars.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/convert_avatars.php,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** convert_avatars.php 11 Oct 2001 22:01:11 -0000 1.1
--- convert_avatars.php 16 Feb 2002 10:35:40 -0000 1.2
***************
*** 1,4 ****
--- 1,18 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
$phpbb_root_path = "../";
Index: convert_bbcodeuid.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/convert_bbcodeuid.php,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** convert_bbcodeuid.php 24 Nov 2001 17:17:06 -0000 1.1
--- convert_bbcodeuid.php 16 Feb 2002 10:35:40 -0000 1.2
***************
*** 1,4 ****
--- 1,18 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
$phpbb_root_path = "../";
Index: convert_conf.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/convert_conf.php,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -r1.2 -r1.3
*** convert_conf.php 8 Sep 2001 22:58:10 -0000 1.2
--- convert_conf.php 16 Feb 2002 10:35:40 -0000 1.3
***************
*** 1,4 ****
--- 1,18 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
$phpbb_root_path = "../";
Index: convert_privmsgs.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/convert_privmsgs.php,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** convert_privmsgs.php 1 Oct 2001 23:22:18 -0000 1.1
--- convert_privmsgs.php 16 Feb 2002 10:35:40 -0000 1.2
***************
*** 1,4 ****
--- 1,18 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
$phpbb_root_path = "../";
Index: convert_sigs.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/convert_sigs.php,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -r1.2 -r1.3
*** convert_sigs.php 8 Sep 2001 22:58:10 -0000 1.2
--- convert_sigs.php 16 Feb 2002 10:35:40 -0000 1.3
***************
*** 1,4 ****
--- 1,17 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
$phpbb_root_path = "../";
Index: convert_user_regdates.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/convert_user_regdates.php,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** convert_user_regdates.php 2 May 2001 22:14:32 -0000 1.1
--- convert_user_regdates.php 16 Feb 2002 10:35:40 -0000 1.2
***************
*** 3,6 ****
--- 3,20 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
chdir("../");
***************
*** 68,70 ****
?>
</body>
! </html>
\ No newline at end of file
--- 82,84 ----
?>
</body>
! </html>
Index: most_users_update.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/most_users_update.php,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -r1.1 -r1.2
*** most_users_update.php 25 Jan 2002 23:21:38 -0000 1.1
--- most_users_update.php 16 Feb 2002 10:35:40 -0000 1.2
***************
*** 3,6 ****
--- 3,19 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
$phpbb_root_path = "../";
***************
*** 27,29 ****
?>
</body>
! </html>
\ No newline at end of file
--- 40,42 ----
?>
</body>
! </html>
Index: nuke-db.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/nuke-db.php,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -r1.2 -r1.3
*** nuke-db.php 9 Apr 2001 19:57:07 -0000 1.2
--- nuke-db.php 16 Feb 2002 10:35:40 -0000 1.3
***************
*** 1,3 ****
--- 1,18 ----
<?php
+
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
+
// Just a handy script to completely wipe out the contents of a
// database.. Use with caution :)
Index: search_fill.php
===================================================================
RCS file: /cvsroot/phpbb/phpBB2/develop/search_fill.php,v
retrieving revision 1.8
retrieving revision 1.9
diff -C2 -r1.8 -r1.9
*** search_fill.php 25 Jan 2002 01:31:42 -0000 1.8
--- search_fill.php 16 Feb 2002 10:35:40 -0000 1.9
***************
*** 1,4 ****
--- 1,17 ----
<?php
+ //
+ // Security message:
+ //
+ // This script is potentially dangerous.
+ // Remove or comment the next line (die(".... ) to enable this script.
+ // Do NOT FORGET to either remove this script or disable it after you have used it.
+ //
+ die("Please read the first lines of this script for instructions on how to enable it");
+
+ //
+ // Do not change anything below this line.
+ //
+
set_time_limit(0);
$common_percent = 0.4; // Percentage of posts in which a word has to appear to be marked as common
|