phpwiki-talk

[Phpwiki-talk] admin password in config.ini

[Jim C. <ji...@iN...>]

A minor issue ...

The ADMIN_PASSWD line doesn't use any quoting in the config-dist.ini ... 
but it's possible for passencrypt.php to output something that needs to 
be quoted in PHP ... (i.e. with a ; in it)

Is there a foolproof way of providing some quoting for this option (I 
guess we have to avoid ;'" and perhaps others?) by default, or perhaps 
hacking passencrypt.php so it has a list of characters to avoid?

-jim

Re: [Phpwiki-talk] admin password in config.ini

[Reini U. <ru...@x-...>]

Jim Cheetham schrieb:
> The ADMIN_PASSWD line doesn't use any quoting in the config-dist.ini ... 
> but it's possible for passencrypt.php to output something that needs to 
> be quoted in PHP ... (i.e. with a ; in it)
> 
> Is there a foolproof way of providing some quoting for this option (I 
> guess we have to avoid ;'" and perhaps others?) by default, or perhaps 
> hacking passencrypt.php so it has a list of characters to avoid?

I don't know the exact internals of parse_ini_file(), but
ADMIN_PASSWD = ";lklmdckm"
should work.
The pear Config_Container_IniFile module we also used was more problematic.

-- 
Reini Urban
http://xarch.tu-graz.ac.at/home/rurban/