Fixed: FS#3712 - Client DB credentials not escaped

Till Brehm

2014-10-23 67fedede3887d97078862e9b58524dc71162ba24

Fixed: FS#3712 - Client DB credentials not escaped

 install/dist/lib/fedora.lib.php

@@ -1292,7 +1292,7 @@
        $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/mysql_clientdb.conf.master', "tpl/mysql_clientdb.conf.master");
        $content = str_replace('{hostname}', $conf['mysql']['host'], $content);
        $content = str_replace('{username}', $conf['mysql']['admin_user'], $content);
        $content = str_replace('{password}', $conf['mysql']['admin_password'], $content);
        $content = str_replace('{password}', addslashes($conf['mysql']['admin_password']), $content);
        wf("$install_dir/server/lib/mysql_clientdb.conf", $content);
        exec('chmod 600 '."$install_dir/server/lib/mysql_clientdb.conf");
        exec('chown root:root '."$install_dir/server/lib/mysql_clientdb.conf");

 install/dist/lib/opensuse.lib.php

@@ -1366,7 +1366,7 @@
        $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/mysql_clientdb.conf.master', "tpl/mysql_clientdb.conf.master");
        $content = str_replace('{hostname}', $conf['mysql']['host'], $content);
        $content = str_replace('{username}', $conf['mysql']['admin_user'], $content);
        $content = str_replace('{password}', $conf['mysql']['admin_password'], $content);
        $content = str_replace('{password}', addslashes($conf['mysql']['admin_password']), $content);
        wf("$install_dir/server/lib/mysql_clientdb.conf", $content);
        exec('chmod 600 '."$install_dir/server/lib/mysql_clientdb.conf");
        exec('chown root:root '."$install_dir/server/lib/mysql_clientdb.conf");

 install/lib/installer_base.lib.php

@@ -2218,7 +2218,7 @@
        $content = rfsel($conf['ispconfig_install_dir'].'/server/conf-custom/install/mysql_clientdb.conf.master', 'tpl/mysql_clientdb.conf.master');
        $content = str_replace('{hostname}', $conf['mysql']['host'], $content);
        $content = str_replace('{username}', $conf['mysql']['admin_user'], $content);
        $content = str_replace('{password}', $conf['mysql']['admin_password'], $content);
        $content = str_replace('{password}', addslashes($conf['mysql']['admin_password']), $content);
        wf($install_dir.'/server/lib/mysql_clientdb.conf', $content);
        chmod($install_dir.'/server/lib/mysql_clientdb.conf', 0600);
        chown($install_dir.'/server/lib/mysql_clientdb.conf', 'root');