mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 18:45:54 +02:00
66c3619872
Bumping across one of our scripts with very long trailing whitespaces, I thought it might be a good idea to clean these up. Doing so, some missing or inconsistent licence headers were fixed. There is no need in shipping all these files en bloc, as their functionality won't change. Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
290 lines
7.8 KiB
Perl
290 lines
7.8 KiB
Perl
#!/usr/bin/perl
|
|
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2007 Michael Tremer & Christian Schmidt #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
|
|
use CGI qw(param);
|
|
use Apache::Htpasswd;
|
|
use Crypt::PasswdMD5;
|
|
|
|
$swroot = "/var/ipfire";
|
|
|
|
my %cgiparams;
|
|
my %mainsettings;
|
|
my %proxysettings;
|
|
|
|
$proxysettings{'NCSA_MIN_PASS_LEN'} = 6;
|
|
|
|
### Initialize environment
|
|
&readhash("${swroot}/main/settings", \%mainsettings);
|
|
&readhash("${swroot}/proxy/advanced/settings", \%proxysettings);
|
|
$language = $mainsettings{'LANGUAGE'};
|
|
|
|
### Initialize language
|
|
if ($language =~ /^(\w+)$/) {$language = $1;}
|
|
#
|
|
# Uncomment this to force a certain language:
|
|
# $language='en';
|
|
#
|
|
require "${swroot}/langs/en.pl";
|
|
require "${swroot}/langs/${language}.pl";
|
|
|
|
my $userdb = "$swroot/proxy/advanced/ncsa/passwd";
|
|
|
|
&readhash("$swroot/ethernet/settings", \%netsettings);
|
|
|
|
my $success = 0;
|
|
|
|
&getcgihash(\%cgiparams);
|
|
|
|
if ($cgiparams{'SUBMIT'} eq $tr{'advproxy chgwebpwd change password'})
|
|
{
|
|
if ($cgiparams{'USERNAME'} eq '')
|
|
{
|
|
$errormessage = $tr{'advproxy errmsg no username'};
|
|
goto ERROR;
|
|
}
|
|
if (($cgiparams{'OLD_PASSWORD'} eq '') || ($cgiparams{'NEW_PASSWORD_1'} eq '') || ($cgiparams{'NEW_PASSWORD_2'} eq ''))
|
|
{
|
|
$errormessage = $tr{'advproxy errmsg no password'};
|
|
goto ERROR;
|
|
}
|
|
if (!($cgiparams{'NEW_PASSWORD_1'} eq $cgiparams{'NEW_PASSWORD_2'}))
|
|
{
|
|
$errormessage = $tr{'advproxy errmsg passwords different'};
|
|
goto ERROR;
|
|
}
|
|
if (length($cgiparams{'NEW_PASSWORD_1'}) < $proxysettings{'NCSA_MIN_PASS_LEN'})
|
|
{
|
|
$errormessage = $tr{'advproxy errmsg password length 1'}.$proxysettings{'NCSA_MIN_PASS_LEN'}.$tr{'advproxy errmsg password length 2'};
|
|
goto ERROR;
|
|
}
|
|
|
|
my $htpasswd = new Apache::Htpasswd("$userdb");
|
|
|
|
# Check if a user with this name exists
|
|
my $old_password = $htpasswd->fetchPass($cgiparams{'USERNAME'});
|
|
if (!$old_password) {
|
|
$errormessage = $tr{'advproxy errmsg invalid user'};
|
|
goto ERROR;
|
|
}
|
|
|
|
# Reset password
|
|
if (!$htpasswd->htpasswd($cgiparams{'USERNAME'}, $cgiparams{'NEW_PASSWORD_1'},
|
|
$cgiparams{'OLD_PASSWORD'})) {
|
|
$errormessage = $tr{'advproxy errmsg password incorrect'};
|
|
goto ERROR;
|
|
}
|
|
|
|
$success = 1;
|
|
undef %cgiparams;
|
|
}
|
|
|
|
ERROR:
|
|
|
|
print "Pragma: no-cache\n";
|
|
print "Cache-control: no-cache\n";
|
|
print "Connection: close\n";
|
|
print "Content-type: text/html\n\n";
|
|
|
|
print <<END
|
|
<html>
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>
|
|
<title></title>
|
|
</head>
|
|
|
|
<body bgcolor="#FFFFFF">
|
|
|
|
<center>
|
|
|
|
<form method='post' action='$ENV{'SCRIPT_NAME'}'>
|
|
|
|
<table width="80%" cellspacing="10" cellpadding="5">
|
|
|
|
<tr>
|
|
<td bgcolor="#FFFFFF" align="center">
|
|
<table width="100%" cellspacing="10" cellpadding="10" bordercolor="#9A9A9A" border="1">
|
|
<tr>
|
|
<td nowrap bgcolor="#993333" align="center" >
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#FFFFFF" size="4">
|
|
<b>$tr{'advproxy chgwebpwd change web password'}</b>
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td align="center">
|
|
<table width="50%" cellspacing="7" cellpadding="7">
|
|
<tr>
|
|
<td nowrap bgcolor="#FFFFFF" align="left">
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#666666" size="2">
|
|
<b>$tr{'advproxy chgwebpwd username'}:</b>
|
|
</font>
|
|
</td>
|
|
<td ><input type="text" name="USERNAME" value="$cgiparams{'USERNAME'}" size="30"></td>
|
|
</tr>
|
|
<tr>
|
|
<td nowrap bgcolor="#FFFFFF" align="left">
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#666666" size="2">
|
|
<b>$tr{'advproxy chgwebpwd old password'}:</b>
|
|
</font>
|
|
</td>
|
|
<td><input type="password" name="OLD_PASSWORD" value="$cgiparams{'OLD_PASSWORD'}" size="30"></td>
|
|
</tr>
|
|
<tr>
|
|
<td nowrap bgcolor="#FFFFFF" align="left">
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#666666" size="2">
|
|
<b>$tr{'advproxy chgwebpwd new password'}:</b>
|
|
</font>
|
|
</td>
|
|
<td><input type="password" name="NEW_PASSWORD_1" value="$cgiparams{'NEW_PASSWORD_1'}" size="30"></td>
|
|
</tr>
|
|
<tr>
|
|
<td nowrap bgcolor="#FFFFFF" align="left">
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#666666" size="2">
|
|
<b>$tr{'advproxy chgwebpwd new password confirm'}:</b>
|
|
</font>
|
|
</td>
|
|
<td><input type="password" name="NEW_PASSWORD_2" value="$cgiparams{'NEW_PASSWORD_2'}" size="30"></td>
|
|
</tr>
|
|
</table>
|
|
<table width="100%" cellspacing="7" cellpadding="7">
|
|
<tr>
|
|
<td align="center"><br><input type='submit' name='SUBMIT' value="$tr{'advproxy chgwebpwd change password'}"></td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
END
|
|
;
|
|
|
|
if ($errormessage)
|
|
{
|
|
print <<END
|
|
<tr>
|
|
<td nowrap bgcolor="#FF0000" align="center">
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#FFFFFF" size="2">
|
|
<b>$tr{'advproxy chgwebpwd ERROR'}</b> $errormessage
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
END
|
|
;
|
|
}
|
|
|
|
if ($success)
|
|
{
|
|
print <<END
|
|
<tr>
|
|
<td nowrap bgcolor="#00C000" align="center">
|
|
<font face="trebuchet ms, helvetica, sans-serif" color="#FFFFFF" size="2">
|
|
<b>$tr{'advproxy chgwebpwd SUCCESS'}</b> $tr{'advproxy errmsg change success'}
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
END
|
|
;
|
|
}
|
|
|
|
|
|
print <<END
|
|
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
|
|
</table>
|
|
|
|
</form>
|
|
|
|
</center>
|
|
|
|
</body>
|
|
|
|
</html>
|
|
END
|
|
;
|
|
|
|
# -------------------------------------------------------------------
|
|
|
|
sub readhash
|
|
{
|
|
my $filename = $_[0];
|
|
my $hash = $_[1];
|
|
my ($var, $val);
|
|
|
|
if (-e $filename)
|
|
{
|
|
open(FILE, $filename) or die "Unable to read file $filename";
|
|
while (<FILE>)
|
|
{
|
|
chop;
|
|
($var, $val) = split /=/, $_, 2;
|
|
if ($var)
|
|
{
|
|
$val =~ s/^\'//g;
|
|
$val =~ s/\'$//g;
|
|
|
|
# Untaint variables read from hash
|
|
$var =~ /([A-Za-z0-9_-]*)/; $var = $1;
|
|
$val =~ /([\w\W]*)/; $val = $1;
|
|
$hash->{$var} = $val;
|
|
}
|
|
}
|
|
close FILE;
|
|
}
|
|
}
|
|
|
|
# -------------------------------------------------------------------
|
|
|
|
sub getcgihash
|
|
{
|
|
my ($hash, $params) = @_;
|
|
my $cgi = CGI->new ();
|
|
return if ($ENV{'REQUEST_METHOD'} ne 'POST');
|
|
if (!$params->{'wantfile'}) {
|
|
$CGI::DISABLE_UPLOADS = 1;
|
|
$CGI::POST_MAX = 512 * 1024;
|
|
} else {
|
|
$CGI::POST_MAX = 10 * 1024 * 1024;
|
|
}
|
|
|
|
$cgi->referer() =~ m/^https?\:\/\/([^\/]+)/;
|
|
my $referer = $1;
|
|
$cgi->url() =~ m/^https?\:\/\/([^\/]+)/;
|
|
my $servername = $1;
|
|
return if ($referer ne $servername);
|
|
|
|
### Modified for getting multi-vars, split by |
|
|
%temp = $cgi->Vars();
|
|
foreach my $key (keys %temp) {
|
|
$hash->{$key} = $temp{$key};
|
|
$hash->{$key} =~ s/\0/|/g;
|
|
$hash->{$key} =~ s/^\s*(.*?)\s*$/$1/;
|
|
}
|
|
|
|
if (($params->{'wantfile'})&&($params->{'filevar'})) {
|
|
$hash->{$params->{'filevar'}} = $cgi->upload
|
|
($params->{'filevar'});
|
|
}
|
|
return;
|
|
}
|
|
|
|
# -------------------------------------------------------------------
|