|
Lines 30-35
use C4::Branch; # GetBranches
Link Here
|
| 30 |
my $query = new CGI; |
30 |
my $query = new CGI; |
| 31 |
my $op=$query->param("op") || ''; |
31 |
my $op=$query->param("op") || ''; |
| 32 |
my $filename=$query->param("filename"); |
32 |
my $filename=$query->param("filename"); |
|
|
33 |
$filename =~ s/(\r|\n)//; |
| 33 |
my $dbh=C4::Context->dbh; |
34 |
my $dbh=C4::Context->dbh; |
| 34 |
my $marcflavour = C4::Context->preference("marcflavour"); |
35 |
my $marcflavour = C4::Context->preference("marcflavour"); |
| 35 |
|
36 |
|
|
Lines 178-184
if ($op eq "export") {
Link Here
|
| 178 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'sql', filename => "$filename" } ) |
179 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'sql', filename => "$filename" } ) |
| 179 |
} |
180 |
} |
| 180 |
unless ( $successful_export ) { |
181 |
unless ( $successful_export ) { |
| 181 |
warn "A suspicious attempt was made to download the db at '$filename' by someone at " . $query->remote_host() . "\n"; |
182 |
my $remotehost = $query->remote_host(); |
|
|
183 |
$remotehost =~ s/(\n|\r)//; |
| 184 |
warn "A suspicious attempt was made to download the db at '$filename' by someone at " . $remotehost . "\n"; |
| 182 |
} |
185 |
} |
| 183 |
exit; |
186 |
exit; |
| 184 |
} |
187 |
} |
|
Lines 188-194
if ($op eq "export") {
Link Here
|
| 188 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'tar', filename => "$filename" } ) |
191 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'tar', filename => "$filename" } ) |
| 189 |
} |
192 |
} |
| 190 |
unless ( $successful_export ) { |
193 |
unless ( $successful_export ) { |
| 191 |
warn "A suspicious attempt was made to download the configuration at '$filename' by someone at " . $query->remote_host() . "\n"; |
194 |
my $remotehost = $query->remote_host(); |
|
|
195 |
$remotehost =~ s/(\n|\r)//; |
| 196 |
warn "A suspicious attempt was made to download the configuration at '$filename' by someone at " . $remotehost . "\n"; |
| 192 |
} |
197 |
} |
| 193 |
exit; |
198 |
exit; |
| 194 |
} |
199 |
} |
|
Lines 340-346
sub download_backup {
Link Here
|
| 340 |
my $filename = $args->{filename}; |
345 |
my $filename = $args->{filename}; |
| 341 |
|
346 |
|
| 342 |
return unless ( $directory && -d $directory ); |
347 |
return unless ( $directory && -d $directory ); |
| 343 |
return unless ( $filename =~ m/$extension(\.(gz|bz2|xz))?$/ && not $filename =~ m#(^\.\.|/)# ); |
348 |
return unless ( $filename =~ m/$extension(\.(gz|bz2|xz))?$/ && not $filename =~ m#|# ); |
| 344 |
$filename = "$directory/$filename"; |
349 |
$filename = "$directory/$filename"; |
| 345 |
return unless ( -f $filename && -o $filename ); |
350 |
return unless ( -f $filename && -o $filename ); |
| 346 |
return unless ( open(my $dump, '<', $filename) ); |
351 |
return unless ( open(my $dump, '<', $filename) ); |
| 347 |
- |
|
|