mirror of
https://github.com/pandorafms/pandorafms.git
synced 2025-09-30 05:19:08 +02:00
5b95334ad0
* extensions/system_info.php, godmode/servers/plugin.php, godmode/setup/file_manager.php, include/config_process.php, include/functions_filemanager.php, include/functions_html.php, operation/gis_maps/ajax.php, operation/snmpconsole/snmp_mib_uploader.php: Replaced the possible backslashes with slashes in the directories path. * include/functions_graph.php: Modified the function "grafico_modulo_log4x" to adapt the 'set_include_path' to Windows. * include/get_file.php: Now the file name comes from the function "basename". git-svn-id: https://svn.code.sf.net/p/pandora/code/trunk@9814 c3f86ba8-e40f-0410-aaad-9ba5e7f4b01f
69 lines
2.1 KiB
PHP
69 lines
2.1 KiB
PHP
<?php
|
|
|
|
// Pandora FMS - http://pandorafms.com
|
|
// ==================================================
|
|
// Copyright (c) 2005-2010 Artica Soluciones Tecnologicas
|
|
// Please see http://pandorafms.org for full contribution list
|
|
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU General Public License
|
|
// as published by the Free Software Foundation for version 2.
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
|
|
// Load global vars
|
|
global $config;
|
|
|
|
check_login ();
|
|
|
|
if (! check_acl ($config['id_user'], 0, "PM")) {
|
|
db_pandora_audit("ACL Violation", "Trying to access File manager");
|
|
require ("general/noaccess.php");
|
|
return;
|
|
}
|
|
|
|
require_once ("include/functions_filemanager.php");
|
|
|
|
// Header
|
|
ui_print_page_header (__('File manager'), "", false, "", true);
|
|
|
|
if (isset($config['filemanager']['message'])) {
|
|
echo $config['filemanager']['message'];
|
|
$config['filemanager']['message'] = null;
|
|
}
|
|
|
|
$directory = (string) get_parameter ('directory', "/");
|
|
$directory = str_replace("\\", "/", $directory);
|
|
|
|
// A miminal security check to avoid directory traversal
|
|
if (preg_match ("/\.\./", $directory))
|
|
$directory = "images";
|
|
if (preg_match ("/^\//", $directory))
|
|
$directory = "images";
|
|
if (preg_match ("/^manager/", $directory))
|
|
$directory = "images";
|
|
|
|
/* Add custom directories here */
|
|
$fallback_directory = "images";
|
|
|
|
$banned_directories['include'] = true;
|
|
$banned_directories['godmode'] = true;
|
|
$banned_directories['operation'] = true;
|
|
$banned_directories['reporting'] = true;
|
|
$banned_directories['general'] = true;
|
|
$banned_directories[ENTERPRISE_DIR] = true;
|
|
|
|
if (isset ($banned_directories[$directory]))
|
|
$directory = $fallback_directory;
|
|
|
|
$real_directory = realpath ($config['homedir'] . '/' . $directory);
|
|
|
|
echo '<h4>' . __('Index of %s', $directory) . '</h4>';
|
|
|
|
filemanager_file_explorer($real_directory,
|
|
$directory,
|
|
'index.php?sec=gsetup&sec2=godmode/setup/file_manager');
|
|
?>
|