Add the website user and group also to the passwd and group files in chroot...

tbrehm

2009-08-28 2bbc4c7761a6d0e97cc8f22bccbea94835fcbc7d

 interface/lib/classes/tform_actions.inc.php

@@ -1,7 +1,7 @@
<?php

/*
Copyright (c) 2005, Till Brehm, projektfarm Gmbh
Copyright (c) 2007, Till Brehm, projektfarm Gmbh
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
@@ -28,19 +28,13 @@
EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/

/**
* Action framework for the tform library.
*
* @author Till Brehm <t.brehm@scrigo.org>
* @copyright Copyright &copy; 2005, Till Brehm
*/

class tform_actions {

        var $id;
        var $activeTab;
        var $dataRecord;
        var $plugins = array();
        public $id;
        public $activeTab;
        public $dataRecord;
        public $plugins = array();
      public $oldDataRecord; // This array is only filled during updates and when db_history is enabled.

        function onLoad() {
                global $app, $conf, $tform_def_file;
@@ -59,11 +53,13 @@
            
            // show print version of the form
            if(isset($_GET["print_form"]) && $_GET["print_form"] == 1) {
               die('Function disabled.');
               $this->onPrintForm();
            }
            
            // send this form by email
            if(isset($_GET["send_form_by_mail"]) && $_GET["send_form_by_mail"] == 1) {
               die('Function disabled.');
               $this->onMailSendForm();
            }

@@ -84,9 +80,11 @@

                // Calling the action functions
                if($this->id > 0) {
                        $this->onUpdate();
               $app->tform->action == 'EDIT';
               $this->onUpdate();
                } else {
                        $this->onInsert();
               $app->tform->action == 'NEW';
               $this->onInsert();
                }
        }

@@ -104,7 +102,7 @@
                if($app->tform->errorMessage == '') {
                  
                  if($app->tform->formDef['db_history'] == 'yes') {
                     $old_data_record = $app->tform->getDataRecord($this->id);
                     $this->oldDataRecord = $app->tform->getDataRecord($this->id);
                  }
                  
                  // Save record in database
@@ -118,13 +116,13 @@
                        foreach($this->plugins as $plugin) {
                                $plugin->onInsert();
                        }

                        $this->onAfterUpdate();
						
                  $this->onAfterUpdate();
                  
                  // Write data history (sys_datalog)
                  if($app->tform->formDef['db_history'] == 'yes') {
                     $new_data_record = $app->tform->getDataRecord($this->id);
                     $app->tform->datalogSave('UPDATE',$this->id,$old_data_record,$new_data_record);
                     $app->tform->datalogSave('UPDATE',$this->id,$this->oldDataRecord,$new_data_record);
                     unset($new_data_record);
                     unset($old_data_record);
                  }
@@ -165,7 +163,7 @@
      
      function onUpdateSave($sql) {
         global $app;
         if(!empty($sql)) {
         if(!empty($sql) && !$app->tform->isReadonlyTab($app->tform->getCurrentTab(),$this->id)) {
            $app->db->query($sql);
            if($app->db->errorMessage != '') die($app->db->errorMessage);
         }
@@ -267,7 +265,7 @@
        function onError() {
                global $app, $conf;

                $app->tpl->setVar("error","<b>".$app->lng('Error').":</b><br>".$app->tform->errorMessage);
                $app->tpl->setVar("error","<li>".$app->tform->errorMessage."</li>");
                $app->tpl->setVar($this->dataRecord);
                $this->onShow();
        }
@@ -299,6 +297,8 @@

                        //$this->dataRecord = $app->db->queryOneRecord("SELECT * FROM ".$liste["table"]." WHERE ".$liste["table_idx"]." = ".$this->id);
                  $this->dataRecord = $app->tform->getDataRecord($this->id);
						
                  $this->onBeforeDelete();

                        // Saving record to datalog when db_history enabled
                        if($app->tform->formDef["db_history"] == 'yes') {
@@ -336,6 +336,10 @@

        }
      
      function onBeforeDelete() {
            global $app, $conf;
        }
		
      function onAfterDelete() {
            global $app, $conf;
        }
@@ -355,7 +359,7 @@
         if($app->tform->formDef['auth'] == 'no') {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
            } else {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
            }
            if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
         
@@ -396,7 +400,7 @@
            if($app->tform->formDef['auth'] == 'no') {
                  $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
               } else {
                  $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
                  $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
               }
               if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
         
@@ -416,11 +420,11 @@
            $headers .= "Content-type: text/html; charset=iso-8859-1\n";
            $headers .= "From: $sender\n";
            
            if (!ereg('^[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+' . '@' . '([-!#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.)+' . '[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$', $sender)) {
            if (!preg_match('/^[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+' . '@' . '([-!#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.)+' . '[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$/', $sender)) {
                $sender = 'noreply@iprguard.de';
              }
            
            if (ereg('^[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+' . '@' . '([-!#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.)+' . '[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$', $email)) {
            if (preg_match('/^[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+' . '@' . '([-!#$%&\'*+\\/0-9=?A-Z^_`a-z{|}~]+\.)+' . '[-!#$%&\'*+\\./0-9=?A-Z^_`a-z{|}~]+$/', $email)) {
                mail($email, 'Domainrecherche Statement '.$record["domain"], $email_message, $headers);
              }
            echo "<p>&nbsp;</p><p>Email wurde versand.</p>";
@@ -432,7 +436,7 @@
         if($app->tform->formDef['auth'] == 'no') {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
            } else {
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
               $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
            }
            if(!$record = $app->db->queryOneRecord($sql)) $app->error($app->lng('error_no_view_permission'));
         
@@ -523,7 +527,7 @@
                // bestehenden Datensatz anzeigen
                if($app->tform->errorMessage == '') {
                        if($app->tform->formDef['auth'] == 'yes' && $_SESSION["s"]["user"]["typ"] != 'admin') {
                           $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('u');
                           $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id." AND ".$app->tform->getAuthSQL('r');
                        } else {
                           $sql = "SELECT * FROM ".$app->tform->formDef['db_table']." WHERE ".$app->tform->formDef['db_table_idx']." = ".$this->id;
                        }