Commit Graph

21 Commits

Author SHA1 Message Date
David Anderson aba8af3bc0 admin web: fix a bug and security vulnerability
In the "ops" web page showing results, the credit link was wrong.

The page for grepping logs allowed people to run arbitrary shell commands.
Use escapeshellcmd() to prevent this.

However: the Ops interface lets you type in arbitrary SQL,
which lets bad guys do all sorts of things.
So you need to protect access to Ops very strongly.

TODO: fix all vulnerabilities in ops/.
Get rid of the DB browsing features; use phpmysqladmin.
2017-05-11 21:14:15 -07:00
David Anderson e6ecb981b3 web: change CSS usage to partly match Twitter Bootstrap. From Christian Beer. 2014-10-02 12:15:54 -07:00
David Anderson 9baf78fe5f - web: added copyright and license info to PHP files
svn path=/trunk/boinc/; revision=15758
2008-08-05 22:43:14 +00:00
David Anderson d642cd6815 - small web fixes; fixes #421
svn path=/trunk/boinc/; revision=14485
2008-01-07 23:33:48 +00:00
David Anderson bc5b979afb - Added new script "update_versions_v6"; use this instead of
update_versions to add version 6 apps.
    It looks for API_VERSION string in main executable,
    adds the API version to the app_version XML,
    and sets min_core_version to 6 for version 6+ apps
- API: include API_VERSION string
- convert tabs to spaces here and there
- scheduler: parse unused elements in <net_stats>
- ops/show_log.php: if no URL args, just show form (fixes #415)
- client: parse and store api_version (not used yet)

svn path=/trunk/boinc/; revision=13627
2007-09-21 18:10:54 +00:00
David Anderson 477008a3c1 - user web: added Burma to country list
- admin web: removed deprecated create-account scripts

html/
    inc/
        cache.inc
        country.inc
    ops/
        create_account_form.php (removed)
        create_account_action.php (removed)
        show_log.php

svn path=/trunk/boinc/; revision=12941
2007-06-15 23:54:25 +00:00
Bruce Allen 849f83488b Checking in the right versions of these files....
svn path=/trunk/boinc/; revision=5353
2005-02-08 04:38:31 +00:00
Bruce Allen 94ea96d986 Needed to keep clickable line nums working
svn path=/trunk/boinc/; revision=4972
2004-12-31 01:27:50 +00:00
Bruce Allen b60bb59c28 No need for user to type file name(s), default is now *.log
svn path=/trunk/boinc/; revision=4971
2004-12-31 01:15:50 +00:00
David Anderson 8ffbaf8014 *** empty log message ***
svn path=/trunk/boinc/; revision=4694
2004-12-01 22:44:47 +00:00
David Anderson f6459acbef *** empty log message ***
svn path=/trunk/boinc/; revision=4078
2004-08-20 18:45:43 +00:00
David Anderson 9bdde0b5b3 *** empty log message ***
svn path=/trunk/boinc/; revision=3517
2004-06-09 19:15:57 +00:00
Karl Chen 545a56d5c8 directory structure change
svn path=/trunk/boinc/; revision=2938
2004-02-02 23:34:39 +00:00
David Anderson 5fc26034c5 *** empty log message ***
svn path=/trunk/boinc/; revision=1773
2003-07-22 20:52:25 +00:00
Karl Chen b152391574 *** empty log message ***
svn path=/trunk/boinc/; revision=1759
2003-07-21 21:38:54 +00:00
Karl Chen 6a3532a3fc *** empty log message ***
svn path=/trunk/boinc/; revision=1687
2003-07-15 21:37:04 +00:00
Karl Chen 468ba498c6 *** empty log message ***
svn path=/trunk/boinc/; revision=1686
2003-07-15 21:30:36 +00:00
Karl Chen 5dd59b8c90 *** empty log message ***
svn path=/trunk/boinc/; revision=1685
2003-07-15 21:30:05 +00:00
Karl Chen cf52728504 *** empty log message ***
svn path=/trunk/boinc/; revision=1684
2003-07-15 21:28:42 +00:00
Karl Chen a679d222a4 *** empty log message ***
svn path=/trunk/boinc/; revision=1640
2003-07-02 22:52:53 +00:00
Karl Chen 693650b406 log grepping/showing
svn path=/trunk/boinc/; revision=1639
2003-07-02 22:33:18 +00:00