mirror of
https://github.com/webmin/webmin.git
synced 2026-10-29 22:50:58 +00:00
5e4b937410
This patch fixes permission checks on the remaining SQL and LDAP backend endpoints.
Jamie, your original fix 3d0a9aeea8 onnly updated `save_sql.cgi`, but three related files still were accepting the unrelated password-edit permission.
51 lines
1.2 KiB
Perl
Executable File
51 lines
1.2 KiB
Perl
Executable File
#!/usr/local/bin/perl
|
|
# Create all needed tables
|
|
|
|
use strict;
|
|
use warnings;
|
|
no warnings 'redefine';
|
|
no warnings 'uninitialized';
|
|
require './acl-lib.pl'; ## no critic
|
|
our (%in, %text, %config, %access);
|
|
$access{'sql'} || &error($text{'sql_ecannot'});
|
|
&ReadParse();
|
|
&error_setup($text{'make_err'});
|
|
|
|
my %miniserv;
|
|
&get_miniserv_config(\%miniserv);
|
|
my $dbh = &connect_userdb($in{'userdb'});
|
|
ref($dbh) || &error($dbh);
|
|
|
|
&ui_print_unbuffered_header(undef, $text{'make_title'}, "");
|
|
|
|
# Create the tables
|
|
foreach my $sql (&userdb_table_sql($in{'userdb'})) {
|
|
print &text('make_exec', "<tt>".&html_escape($sql)."</tt>"),"<br>\n";
|
|
my $cmd = $dbh->prepare($sql);
|
|
if (!$cmd || !$cmd->execute()) {
|
|
print &text('make_failed', &html_escape($dbh->errstr)),"<p>\n";
|
|
}
|
|
else {
|
|
$cmd->finish();
|
|
print $text{'make_done'},"<p>\n";
|
|
}
|
|
}
|
|
&disconnect_userdb($in{'userdb'}, $dbh);
|
|
|
|
# Check again if OK
|
|
my $err = &validate_userdb($in{'userdb'}, 0);
|
|
if ($err) {
|
|
print "<b>",&text('make_still', $err),"</b><p>\n";
|
|
}
|
|
else {
|
|
&lock_file($ENV{'MINISERV_CONFIG'});
|
|
$miniserv{'userdb'} = $in{'userdb'};
|
|
$miniserv{'userdb_addto'} = $in{'addto'};
|
|
&put_miniserv_config(\%miniserv);
|
|
&unlock_file($ENV{'MINISERV_CONFIG'});
|
|
&reload_miniserv();
|
|
}
|
|
|
|
&ui_print_footer("", $text{'index_return'});
|
|
|