os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Move the sendpr verification "database" to a non world-writeable

Browse source 
directory.

OK'ed by:	ceri
This commit is contained in:
Simon L. B. Nielsen 2005-12-04 22:25:20 +00:00
parent 5aaa666a2b
commit 451acb67a8
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/www/; revision=26520
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
en/cgi/confirm-code.cgi
View file

@ -1,6 +1,6 @@
#!/usr/bin/perl -T #!/usr/bin/perl -T
# #
# $FreeBSD: www/en/cgi/confirm-code.cgi,v 1.6 2005/12/04 16:18:40 ceri Exp $ # $FreeBSD: www/en/cgi/confirm-code.cgi,v 1.7 2005/12/04 16:36:51 ceri Exp $
# #
# Copyright (c) 2003 Eric Anderson # Copyright (c) 2003 Eric Anderson
# Copyright (c) 2005 Ceri Davies <ceri@FreeBSD.org> # Copyright (c) 2005 Ceri Davies <ceri@FreeBSD.org>
@ -38,11 +38,11 @@ $expiretime = 0; # Default for the Expires: header
%db = ( %db = (
# The querypr one is not used, but stands as an example. # The querypr one is not used, but stands as an example.
# querypr => { # querypr => {
# path => '/tmp/querypr-code.db', # path => '/usr/local/www/var/confirm-code/querypr-code.db',
# lifespan => 2700, # lifespan => 2700,
# }, # },
sendpr => { sendpr => {
path => '/tmp/sendpr-code.db', path => '/usr/local/www/var/confirm-code/sendpr-code.db',
lifespan => 2700, lifespan => 2700,
}, },
); );

4
en/cgi/dosendpr.cgi
View file

@ -8,7 +8,7 @@
# GNU General Public License Version 2. # GNU General Public License Version 2.
# (http://www.gnu.ai.mit.edu/copyleft/gpl.html) # (http://www.gnu.ai.mit.edu/copyleft/gpl.html)
# #
# $FreeBSD: www/en/cgi/dosendpr.cgi,v 1.23 2005/11/06 22:07:23 ceri Exp $ # $FreeBSD: www/en/cgi/dosendpr.cgi,v 1.24 2005/11/16 23:35:57 fenner Exp $
require "html.pl"; require "html.pl";
@ -23,7 +23,7 @@ my $blackhole_err = 0;
my $openproxy; my $openproxy;
my $expiretime = 2700; my $expiretime = 2700;
$dbpath = "/tmp/sendpr-code.db"; $dbpath = "/usr/local/www/var/confirm-code/sendpr-code.db";
# Environment variables to stuff in the PR header. # Environment variables to stuff in the PR header.
my @ENV_captures = qw/ REMOTE_HOST my @ENV_captures = qw/ REMOTE_HOST