com web/master: Fix username auditing: manage/mirrors.php
| From: | Hannes Magnusson | Date: | Sun, 16 Feb 2014 20:17:23 +0000 |
| Subject: | com web/master: Fix username auditing: manage/mirrors.php | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-18346@lists.php.net to get a copy of this message | ||
Commit: 0d0df72c143e095c8b28f056fc2876b8135d4c3b
Author: Hannes Magnusson <bjori@mongodb.com> Sun, 16 Feb 2014 12:17:23 -0800
Parents: 855faa692b4a4381677c8106051a31d517534e6a
Branches: master
Link: http://git.php.net/?p=web/master.git;a=commitdiff;h=0d0df72c143e095c8b28f056fc2876b8135d4c3b
Log:
Fix username auditing
Changed paths:
M manage/mirrors.php
Diff:
diff --git a/manage/mirrors.php b/manage/mirrors.php
index 188415d..5533d8f 100644
--- a/manage/mirrors.php
+++ b/manage/mirrors.php
@@ -57,7 +57,7 @@ if (isset($id) && isset($hostname)) {
// Perform a full data update on a mirror
case "update":
- $mod_by_time = '<b>'.strtoupper(date('d-M-Y H:i:s T')).'</b>
['.$_SESSION["user"].'] Mirror updated';
+ $mod_by_time = '<b>'.strtoupper(date('d-M-Y H:i:s T')).'</b>
['.$_SESSION["username"].'] Mirror updated';
$query = "UPDATE mirrors SET hostname='$hostname', active=$active,
" .
"mirrortype=$mirrortype, cname='$cname',
maintainer='".unmangle($maintainer)."', " .
"providername='".unmangle($providername)."',
providerurl='$providerurl', " .
@@ -116,7 +116,7 @@ if (isset($id) && isset($hostname)) {
// If a mirror has been modified, send information safe for public eyes to the
// list: active status, hostname.
} elseif ($mode == 'update') {
- $body = 'The mirror '.$hostname.' has been modified by
'.$_SERVER["username"].'. It\'s status is ';
+ $body = 'The mirror '.$hostname.' has been modified by
'.$_SESSION["username"].'. It\'s status is ';
$body .= isset($active) && $active == true ? 'active.' :
'inactive, and DNS will be disabled.';
$body .= isset($acmt) && !empty($acmt) ? ' Notes were added to the mirror\'s
file.' : '';
@mail('network-status@lists.php.net','[mirrors] Status change for
'.$hostname,$body,"From: mirrors@php.net\r\n", "-fnoreply@php.net");