| 1 |
burnat |
1.1 |
diff -Nur -x '*.orig' -x '*.rej' e-smith-base-4.18.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/useraccounts.pm mezzanine_patched_e-smith-base-4.18.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/useraccounts.pm |
| 2 |
|
|
--- e-smith-base-4.18.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/useraccounts.pm 2008-02-12 16:56:28.000000000 +1100 |
| 3 |
|
|
+++ mezzanine_patched_e-smith-base-4.18.0/root/usr/lib/perl5/site_perl/esmith/FormMagick/Panel/useraccounts.pm 2008-02-12 16:53:11.000000000 +1100 |
| 4 |
|
|
@@ -729,7 +729,7 @@ |
| 5 |
|
|
my ($self) = @_; |
| 6 |
|
|
my $acctName = $self->{cgi}->param('acctName'); |
| 7 |
|
|
|
| 8 |
|
|
- unless (($acctName) = ($acctName =~ /^(\w[\-\w_\.]+)$/)) { |
| 9 |
|
|
+ unless (($acctName) = ($acctName =~ /^(\w[\-\w_\.]*)$/)) { |
| 10 |
|
|
return $self->error($self->localise('TAINTED_USER', |
| 11 |
|
|
{ acctName => $acctName })); |
| 12 |
|
|
} |
| 13 |
|
|
@@ -824,7 +824,7 @@ |
| 14 |
|
|
undef $accountdb; |
| 15 |
|
|
|
| 16 |
|
|
# Untaint the username before use in system() |
| 17 |
|
|
- $acctName =~ /^(\w[\-\w_\.]+)$/; |
| 18 |
|
|
+ $acctName =~ /^(\w[\-\w_\.]*)$/; |
| 19 |
|
|
$acctName = $1; |
| 20 |
|
|
|
| 21 |
|
|
if (system ("/sbin/e-smith/signal-event", "user-create", $acctName)) |
| 22 |
|
|
@@ -874,7 +874,7 @@ |
| 23 |
|
|
undef $accountdb; |
| 24 |
|
|
|
| 25 |
|
|
# Untaint the username before use in system() |
| 26 |
|
|
- $acctName =~ /^(\w[\-\w_\.]+)$/; |
| 27 |
|
|
+ $acctName =~ /^(\w[\-\w_\.]*)$/; |
| 28 |
|
|
$acctName = $1; |
| 29 |
|
|
if (system ("/sbin/e-smith/signal-event", "user-delete", $acctName)) |
| 30 |
|
|
{ |
| 31 |
|
|
@@ -902,7 +902,7 @@ |
| 32 |
|
|
my ($self) = @_; |
| 33 |
|
|
my $acctName = $self->{cgi}->param('acctName'); |
| 34 |
|
|
|
| 35 |
|
|
- unless (($acctName) = ($acctName =~ /^(\w[\-\w_\.]+)$/)) { |
| 36 |
|
|
+ unless (($acctName) = ($acctName =~ /^(\w[\-\w_\.]*)$/)) { |
| 37 |
|
|
return $self->error('TAINTED_USER'); |
| 38 |
|
|
} |
| 39 |
|
|
$acctName = $1; |
| 40 |
|
|
@@ -949,7 +949,7 @@ |
| 41 |
|
|
undef $accountdb; |
| 42 |
|
|
|
| 43 |
|
|
# Untaint the username before use in system() |
| 44 |
|
|
- $acctName =~ /^(\w[\-\w_\.]+)$/; |
| 45 |
|
|
+ $acctName =~ /^(\w[\-\w_\.]*)$/; |
| 46 |
|
|
$acctName = $1; |
| 47 |
|
|
if (system("/sbin/e-smith/signal-event", "user-lock", $acctName)) |
| 48 |
|
|
{ |
Parent Directory
| 
Revision Log
| 
Revision Graph
