Changeset 786
- Timestamp:
- Apr 26, 2017, 1:14:35 PM (7 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/alternc/patches/class/m_mail_egw.php
r785 r786 42 42 // usamos 43 43 $mailinfos = $this->get_details($mail_id); 44 $elmail= $mailinfos['address'] ."@" . $mailinfos['domain'];44 $elmail= escapeshellargs($mailinfos['address'] ."@" . $mailinfos['domain']); 45 45 $err->log("mail_egw", "tries to set password for", $elmail); 46 46 … … 56 56 $adminclave = $L_EGW_ADMINCLAVE; 57 57 //$adminclave= "*******"; 58 $account = $elmail;59 60 $go= $admincli ." " .$command ." " .$adminuser ."," .$adminclave .",\"" .$account ."\"," . $pass;58 $account = escapeshellargs($elmail); 59 60 $go= $admincli ." " .$command ." " .$adminuser ."," .$adminclave .",\"" .$account ."\"," .escapeshellargs($pass) ; 61 61 62 62 echo "<h3>Actualizamos la contrasena en la base ldap</h3>"; … … 107 107 $firstname = $mail; // the left side of the email 108 108 $lastname= "-"; // we have a generic lastname 109 $pass= "*****"; //TEMPORARY110 $email = $account = $mail ."@" .$domain; // account and email are the same109 $pass= hash('sha1', rand()); // TEMPORARY 110 $email = $account = escapeshellargs($mail ."@" .$domain); // account and email are the same 111 111 $expires= "never"; 112 112 $canchangepw= "yes"; … … 119 119 $loginshell = "/bin/bash"; // everyone can have a shell 120 120 121 $go= $admincli ." " .$command ." " .$adminuser ."," .$adminclave .",\"" .$account ."\"," .$firstname ."," .$lastname ."," . $pass.",\"" .$email ."\"," .$expires ."," .$canchangepw ."," .$anonuser ."," .$primarygroup ;121 $go= $admincli ." " .$command ." " .$adminuser ."," .$adminclave .",\"" .$account ."\"," .$firstname ."," .$lastname ."," .escapeshellargs($pass) .",\"" .$email ."\"," .$expires ."," .$canchangepw ."," .$anonuser ."," .$primarygroup ; 122 122 123 123 if (isset($secondarygroup)) { … … 157 157 // usamos 158 158 $mailinfos = $this->get_details($mail_id); 159 $elmail= $mailinfos['address'] ."@" . $mailinfos['domain'];159 $elmail= escapeshellargs($mailinfos['address'] ."@" . $mailinfos['domain']); 160 160 $err->log("mail_egw", "tries to delete", $elmail); 161 161
Note: See TracChangeset
for help on using the changeset viewer.