From 253e876016e06e801b6951ed105e1374716989ba Mon Sep 17 00:00:00 2001
From: tbrehm <t.brehm@ispconfig.org>
Date: Tue, 10 Jun 2008 16:09:34 -0400
Subject: [PATCH] Added a blacklist for not allowed shell user names.
---
interface/web/sites/shell_user_edit.php | 22 ++++++++++++++++++++++
1 files changed, 22 insertions(+), 0 deletions(-)
diff --git a/interface/web/sites/shell_user_edit.php b/interface/web/sites/shell_user_edit.php
index 633ef46..299d1b0 100644
--- a/interface/web/sites/shell_user_edit.php
+++ b/interface/web/sites/shell_user_edit.php
@@ -72,6 +72,17 @@
parent::onShowNew();
}
+ function onBeforeInsert() {
+ global $app, $conf;
+
+ // check if the username is not blacklisted
+ $blacklist = file(ISPC_LIB_PATH.'/shelluser_blacklist');
+ foreach($blacklist as $line) {
+ if(strtolower(trim($line)) == strtolower(trim($this->dataRecord['username']))) $app->tform->errorMessage .= 'The username is not allowed.';
+ }
+ unset($blacklist);
+ }
+
function onAfterInsert() {
global $app, $conf;
@@ -86,6 +97,17 @@
}
+ function onBeforeUpdate() {
+ global $app, $conf;
+
+ // check if the username is not blacklisted
+ $blacklist = file(ISPC_LIB_PATH.'/shelluser_blacklist');
+ foreach($blacklist as $line) {
+ if(strtolower(trim($line)) == strtolower(trim($this->dataRecord['username']))) $app->tform->errorMessage .= 'The username is not allowed.';
+ }
+ unset($blacklist);
+ }
+
function onAfterUpdate() {
global $app, $conf;
--
Gitblit v1.9.1