nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-01-27 00:33:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

[setup] Detect whether suhosin.server.strip is set and discourage it.

Browse Source 
I sanitise the path just fine and I like being able to have arbitrary
paths, and don't want non-alphabetic stuff turned into a question mark.
This commit is contained in:
Andrew McMillan 2010-09-11 23:07:29 +12:00
parent bc88301a4f
commit 645b9196fc
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
htdocs/setup.php
View File

@ -40,6 +40,17 @@ function check_gettext() {
return isset($loaded_extensions['gettext']);
}
function check_suhosin_server_strip() {
global $phpinfo, $loaded_extensions;
if ( !isset($loaded_extensions['suhosin']) ) return true;
if ( ini_get('suhosin.server.strip') == "0" ) {
return true;
}
return false;
}
include("interactive-page.php");
include("page-header.php");
@ -100,7 +111,8 @@ $dependencies = array(
translate('PHP PDO module available') => 'check_pdo',
translate('PDO PostgreSQL drivers') => 'check_pdo_pgsql',
translate('PHP PostgreSQL available') => 'check_pgsql',
translate('GNU gettext support') => 'check_gettext' /*,
translate('GNU gettext support') => 'check_gettext',
translate('Suhosin "server.strip" disabled') => 'check_suhosin_server_strip' /*,
'YAML' => 'php5-syck' */
);