jostreff/nsedit
1
0
Fork 0
mirror of https://github.com/tuxis-ie/nsedit.git synced 2025-04-19 20:09:14 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Allow remote boxes to execute stuff, eventhough they don't really login

Browse source
This commit is contained in:
Mark Schouten 2014-09-26 13:47:52 +02:00
parent f047f60712
commit 262e3c76a8
2 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
includes/config.inc.php-dist
View file

@ -13,6 +13,11 @@ $apisid = ''; # PowerDNS's :server_id
#$wefactapiurl = 'https://yourdomain/Pro/apiv2/api.php'; #$wefactapiurl = 'https://yourdomain/Pro/apiv2/api.php';
#$wefactapikey = 'xyz'; #$wefactapikey = 'xyz';
# If you want external scripts to be able to execute stuff here, add the
# remote-ip to $adminapiips and create a $adminapikey
#$adminapiips = array();
#$adminapikey = 'thisshouldbequitealongstring,youknow';
$authdb = "../etc/pdns.users.sqlite3"; $authdb = "../etc/pdns.users.sqlite3";
$templates = array(); $templates = array();

13
includes/session.inc.php
View file

@ -10,6 +10,19 @@ function is_logged_in() {
if (isset($_SESSION['logged_in']) && $_SESSION['logged_in'] == "true") { if (isset($_SESSION['logged_in']) && $_SESSION['logged_in'] == "true") {
return TRUE; return TRUE;
} else { } else {
global $adminapikey;
global $adminapiips;
if (isset($adminapikey) && isset($allowedips)) {
if (array_search($_SERVER['REMOTE_ADDR'], $adminapiips) !== FALSE) {
if ($_POST['adminapikey'] == $adminapikey) {
# Allow this request, fake that we're logged in.
set_logged_in('admin');
set_is_adminuser();
return TRUE;
}
}
}
return FALSE; return FALSE;
} }
} }