Lines 30-35
use C4::Branch; # GetBranches
Link Here
|
30 |
my $query = new CGI; |
30 |
my $query = new CGI; |
31 |
my $op=$query->param("op") || ''; |
31 |
my $op=$query->param("op") || ''; |
32 |
my $filename=$query->param("filename"); |
32 |
my $filename=$query->param("filename"); |
|
|
33 |
$filename =~ s/(\r|\n)//; |
33 |
my $dbh=C4::Context->dbh; |
34 |
my $dbh=C4::Context->dbh; |
34 |
my $marcflavour = C4::Context->preference("marcflavour"); |
35 |
my $marcflavour = C4::Context->preference("marcflavour"); |
35 |
|
36 |
|
Lines 178-184
if ($op eq "export") {
Link Here
|
178 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'sql', filename => "$filename" } ) |
179 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'sql', filename => "$filename" } ) |
179 |
} |
180 |
} |
180 |
unless ( $successful_export ) { |
181 |
unless ( $successful_export ) { |
181 |
warn "A suspicious attempt was made to download the db at '$filename' by someone at " . $query->remote_host() . "\n"; |
182 |
my $remotehost = $query->remote_host(); |
|
|
183 |
$remotehost =~ s/(\n|\r)//; |
184 |
warn "A suspicious attempt was made to download the db at '$filename' by someone at " . $remotehost . "\n"; |
182 |
} |
185 |
} |
183 |
exit; |
186 |
exit; |
184 |
} |
187 |
} |
Lines 188-194
if ($op eq "export") {
Link Here
|
188 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'tar', filename => "$filename" } ) |
191 |
$successful_export = download_backup( { directory => "$backupdir", extension => 'tar', filename => "$filename" } ) |
189 |
} |
192 |
} |
190 |
unless ( $successful_export ) { |
193 |
unless ( $successful_export ) { |
191 |
warn "A suspicious attempt was made to download the configuration at '$filename' by someone at " . $query->remote_host() . "\n"; |
194 |
my $remotehost = $query->remote_host(); |
|
|
195 |
$remotehost =~ s/(\n|\r)//; |
196 |
warn "A suspicious attempt was made to download the configuration at '$filename' by someone at " . $remotehost . "\n"; |
192 |
} |
197 |
} |
193 |
exit; |
198 |
exit; |
194 |
} |
199 |
} |
Lines 340-346
sub download_backup {
Link Here
|
340 |
my $filename = $args->{filename}; |
345 |
my $filename = $args->{filename}; |
341 |
|
346 |
|
342 |
return unless ( $directory && -d $directory ); |
347 |
return unless ( $directory && -d $directory ); |
343 |
return unless ( $filename =~ m/$extension(\.(gz|bz2|xz))?$/ && not $filename =~ m#(^\.\.|/)# ); |
348 |
return unless ( $filename =~ m/$extension(\.(gz|bz2|xz))?$/ && not $filename =~ m#|# ); |
344 |
$filename = "$directory/$filename"; |
349 |
$filename = "$directory/$filename"; |
345 |
return unless ( -f $filename && -o $filename ); |
350 |
return unless ( -f $filename && -o $filename ); |
346 |
return unless ( open(my $dump, '<', $filename) ); |
351 |
return unless ( open(my $dump, '<', $filename) ); |
347 |
- |
|
|