WebSVN – ALCASAR – Diff – /conf/freeradius-web/config.php


<?php
 
 
 
 
 
 
 
 
extract($_GET);
extract($_POST);
extract($_COOKIE);
 
foreach($_POST as $key => $value){
	${$key} = $value;
}
# If using sessions set use_session to 1 to also cache the config file
#
$use_session = 0;
unset($config);
unset($nas_list);
if ($use_session){
	// Start session
	@session_start();
	if (isset($_SESSION['config']))
		$config = $_SESSION['config'];
	if (isset($_SESSION['nas_list']))
		$nas_list = $_SESSION['nas_list'];
}
if (!isset($config)){
	$ARR=file("/etc/freeradius-web/admin.conf");
	$EXTRA_ARR = array();
	foreach($ARR as $val) {
		$val=chop($val);
		if (preg_match('/^[[:space:]]*#/',$val) || preg_match('/^[[:space:]]*$/',$val))
			continue;
		list($key,$v)=preg_split("/:[[:space:]]*/",$val,2);
		if (preg_match("/%\{(.+)\}/",$v,$matches)){
			$val=$config[$matches[1]];
			$v=preg_replace("/%\{$matches[1]\}/",$val,$v);
		}
		if (preg_match("/^nas(\d+)_(\w+)$/",$key,$matches))
			$nas_list[$matches[1]][$matches[2]] = $v;
		if ($key == 'INCLUDE'){
			if (is_readable($v))
				array_push($EXTRA_ARR,file($v));
			else
				echo "<b>Error: File '$v' does not exist or is not readable</b><br>\n";
		}
		else
			$config["$key"]="$v";
	}
	foreach($EXTRA_ARR as $val1) {
		foreach($val1 as $val){
			$val=chop($val);
			if (preg_match('/^[[:space:]]*#/',$val) || preg_match('/^[[:space:]]*$/',$val))
				continue;
			list($key,$v)=preg_split("/:[[:space:]]*/",$val,2);
			if (preg_match("/%\{(.+)\}/",$v,$matches)){
				$val=$config[$matches[1]];
				$v=preg_replace("/%\{$matches[1]\}/",$val,$v);
			}
			if (preg_match("/^nas(\d+)_(\w+)$/",$key,$matches))
				$nas_list[$matches[1]][$matches[2]] = $v;
			$config["$key"]="$v";
		}
	}
	if ($use_session){
		session_register('config');
		session_register('nas_list');
	}
 
}
if ($use_session == 0 && $config['general_use_session'] == 'yes'){
	// Start session
	@session_start();
	if (isset($nas_list))
		session_register('nas_list');
}
//Make sure we are only passed allowed strings in username
if (isset($login)){
	if ($login != '')
	{
		$accent = "âêôûéàèùîáâãäçèéêëìíîïñòóôõöùúûü";
		$login = preg_replace("/[^\w$accent\.\/\@\:\-]/",'',$login);
	}
	if ($login != '' && $config['general_strip_realms'] == 'yes'){
		$realm_del = ($config['general_realm_delimiter'] != '') ? $config['general_realm_delimiter'] : '@';
		$realm_for = ($config['general_realm_format'] != '') ? $config['general_realm_format'] : 'suffix';
		$new = explode($realm_del,$login,2);
		if (count($new) == 2)
			$login = ($realm_for == 'suffix') ? $new[0] : $new[1];
	}
}
unset($mappings);
if (isset($_SESSION['mappings']))
	$mappings = $_SESSION['mappings'];
if (!isset($mappings) && $config['general_username_mappings_file'] != ''){
	$ARR = file($config['general_username_mappings_file']);
	foreach($ARR as $val){
		$val=chop($val);
		if (preg_match('/^[[:space:]]*#/',$val) || preg_match('/^[[:space:]]*$/',$val))
			continue;
		list($key,$realm,$v)=preg_split("/:[[:space:]]*/",$val,3);
		if ($realm == 'accounting' || $realm == 'userdb' || $realm == 'nasdb' || $realm == 'nasadmin')
			$mappings["$key"][$realm] = $v;
		if ($realm == 'nasdb'){
			$NAS_ARR = array();
			$NAS_ARR = explode(',',$v);
			foreach ($nas_list as $key => $nas){
				foreach ($NAS_ARR as $nas_check){
					if ($nas_check == $nas['name'])
						unset($nas_list[$key]);
				}
			}
		}
	}
	if ($config['general_use_session'] == 'yes')
		session_register('mappings');
}
 
 
 
 
@header('Content-type: text/html; charset='.$config['general_charset'].';');
?>
 

Rev 1836	Rev 3173
1	`<?php`	1	`<?php`
2	`#`	-
3	`# Things should work even if register_globals is set to off`	-
4	`#`	2
5	`$testVer=intval(str_replace(".", "",'4.1.0'));`	-
6	`$curVer=intval(str_replace(".", "",phpversion()));`	-
7	`if( $curVer >= $testVer )`	-
8	`{`	-
9	`// import_request_variables('GPC');`	-
10	`extract($_GET);`	3	`extract($_GET);`
11	`extract($_POST);`	4	`extract($_POST);`
12	`extract($_COOKIE);`	5	`extract($_COOKIE);`
13	`}`	-
14	`foreach($_POST as $key => $value){`	6	`foreach($_POST as $key => $value){`
15	`${$key} = $value;`	7	`${$key} = $value;`
16	`}`	8	`}`
17	`# If using sessions set use_session to 1 to also cache the config file`	9	`# If using sessions set use_session to 1 to also cache the config file`
18	`#`	10	`#`
19	`$use_session = 0;`	11	`$use_session = 0;`
20	`unset($config);`	12	`unset($config);`
21	`unset($nas_list);`	13	`unset($nas_list);`
22	`if ($use_session){`	14	`if ($use_session){`
23	`// Start session`	15	`// Start session`
24	`@session_start();`	16	`@session_start();`
25	`if (isset($_SESSION['config']))`	17	`if (isset($_SESSION['config']))`
26	`$config = $_SESSION['config'];`	18	`$config = $_SESSION['config'];`
27	`if (isset($_SESSION['nas_list']))`	19	`if (isset($_SESSION['nas_list']))`
28	`$nas_list = $_SESSION['nas_list'];`	20	`$nas_list = $_SESSION['nas_list'];`
29	`}`	21	`}`
30	`if (!isset($config)){`	22	`if (!isset($config)){`
31	`$ARR=file("/etc/freeradius-web/admin.conf");`	23	`$ARR=file("/etc/freeradius-web/admin.conf");`
32	`$EXTRA_ARR = array();`	24	`$EXTRA_ARR = array();`
33	`foreach($ARR as $val) {`	25	`foreach($ARR as $val) {`
34	`$val=chop($val);`	26	`$val=chop($val);`
35	`if (preg_match('/^[[:space:]]#/',$val) \|\| preg_match('/^[[:space:]]$/',$val))`	27	`if (preg_match('/^[[:space:]]#/',$val) \|\| preg_match('/^[[:space:]]$/',$val))`
36	`continue;`	28	`continue;`
37	`list($key,$v)=preg_split("/:[[:space:]]*/",$val,2);`	29	`list($key,$v)=preg_split("/:[[:space:]]*/",$val,2);`
38	`if (preg_match("/%\{(.+)\}/",$v,$matches)){`	30	`if (preg_match("/%\{(.+)\}/",$v,$matches)){`
39	`$val=$config[$matches[1]];`	31	`$val=$config[$matches[1]];`
40	`$v=preg_replace("/%\{$matches[1]\}/",$val,$v);`	32	`$v=preg_replace("/%\{$matches[1]\}/",$val,$v);`
41	`}`	33	`}`
42	`if (preg_match("/^nas(\d+)_(\w+)$/",$key,$matches))`	34	`if (preg_match("/^nas(\d+)_(\w+)$/",$key,$matches))`
43	`$nas_list[$matches[1]][$matches[2]] = $v;`	35	`$nas_list[$matches[1]][$matches[2]] = $v;`
44	`if ($key == 'INCLUDE'){`	36	`if ($key == 'INCLUDE'){`
45	`if (is_readable($v))`	37	`if (is_readable($v))`
46	`array_push($EXTRA_ARR,file($v));`	38	`array_push($EXTRA_ARR,file($v));`
47	`else`	39	`else`
48	`echo "<b>Error: File '$v' does not exist or is not readable</b><br>\n";`	40	`echo "<b>Error: File '$v' does not exist or is not readable</b><br>\n";`
49	`}`	41	`}`
50	`else`	42	`else`
51	`$config["$key"]="$v";`	43	`$config["$key"]="$v";`
52	`}`	44	`}`
53	`foreach($EXTRA_ARR as $val1) {`	45	`foreach($EXTRA_ARR as $val1) {`
54	`foreach($val1 as $val){`	46	`foreach($val1 as $val){`
55	`$val=chop($val);`	47	`$val=chop($val);`
56	`if (preg_match('/^[[:space:]]#/',$val) \|\| preg_match('/^[[:space:]]$/',$val))`	48	`if (preg_match('/^[[:space:]]#/',$val) \|\| preg_match('/^[[:space:]]$/',$val))`
57	`continue;`	49	`continue;`
58	`list($key,$v)=preg_split("/:[[:space:]]*/",$val,2);`	50	`list($key,$v)=preg_split("/:[[:space:]]*/",$val,2);`
59	`if (preg_match("/%\{(.+)\}/",$v,$matches)){`	51	`if (preg_match("/%\{(.+)\}/",$v,$matches)){`
60	`$val=$config[$matches[1]];`	52	`$val=$config[$matches[1]];`
61	`$v=preg_replace("/%\{$matches[1]\}/",$val,$v);`	53	`$v=preg_replace("/%\{$matches[1]\}/",$val,$v);`
62	`}`	54	`}`
63	`if (preg_match("/^nas(\d+)_(\w+)$/",$key,$matches))`	55	`if (preg_match("/^nas(\d+)_(\w+)$/",$key,$matches))`
64	`$nas_list[$matches[1]][$matches[2]] = $v;`	56	`$nas_list[$matches[1]][$matches[2]] = $v;`
65	`$config["$key"]="$v";`	57	`$config["$key"]="$v";`
66	`}`	58	`}`
67	`}`	59	`}`
68	`if ($use_session){`	60	`if ($use_session){`
69	`session_register('config');`	61	`session_register('config');`
70	`session_register('nas_list');`	62	`session_register('nas_list');`
71	`}`	63	`}`
72		-
73	`}`	64	`}`
74	`if ($use_session == 0 && $config['general_use_session'] == 'yes'){`	65	`if ($use_session == 0 && $config['general_use_session'] == 'yes'){`
75	`// Start session`	66	`// Start session`
76	`@session_start();`	67	`@session_start();`
77	`if (isset($nas_list))`	68	`if (isset($nas_list))`
78	`session_register('nas_list');`	69	`session_register('nas_list');`
79	`}`	70	`}`
80	`//Make sure we are only passed allowed strings in username`	71	`//Make sure we are only passed allowed strings in username`
81	`if (isset($login)){`	72	`if (isset($login)){`
82	`if ($login != '')`	73	`if ($login != '')`
83	`{`	74	`{`
84	`$accent = "âêôûéàèùîáâãäçèéêëìíîïñòóôõöùúûü";`	75	`$accent = "âêôûéàèùîáâãäçèéêëìíîïñòóôõöùúûü";`
85	`$login = preg_replace("/[^\w$accent\.\/\@\:\-]/",'',$login);`	76	`$login = preg_replace("/[^\w$accent\.\/\@\:\-]/",'',$login);`
86	`}`	77	`}`
87	`if ($login != '' && $config['general_strip_realms'] == 'yes'){`	78	`if ($login != '' && $config['general_strip_realms'] == 'yes'){`
88	`$realm_del = ($config['general_realm_delimiter'] != '') ? $config['general_realm_delimiter'] : '@';`	79	`$realm_del = ($config['general_realm_delimiter'] != '') ? $config['general_realm_delimiter'] : '@';`
89	`$realm_for = ($config['general_realm_format'] != '') ? $config['general_realm_format'] : 'suffix';`	80	`$realm_for = ($config['general_realm_format'] != '') ? $config['general_realm_format'] : 'suffix';`
90	`$new = explode($realm_del,$login,2);`	81	`$new = explode($realm_del,$login,2);`
91	`if (count($new) == 2)`	82	`if (count($new) == 2)`
92	`$login = ($realm_for == 'suffix') ? $new[0] : $new[1];`	83	`$login = ($realm_for == 'suffix') ? $new[0] : $new[1];`
93	`}`	84	`}`
94	`}`	85	`}`
95	`unset($mappings);`	86	`unset($mappings);`
96	`if (isset($_SESSION['mappings']))`	87	`if (isset($_SESSION['mappings']))`
97	`$mappings = $_SESSION['mappings'];`	88	`$mappings = $_SESSION['mappings'];`
98	`if (!isset($mappings) && $config['general_username_mappings_file'] != ''){`	89	`if (!isset($mappings) && $config['general_username_mappings_file'] != ''){`
99	`$ARR = file($config['general_username_mappings_file']);`	90	`$ARR = file($config['general_username_mappings_file']);`
100	`foreach($ARR as $val){`	91	`foreach($ARR as $val){`
101	`$val=chop($val);`	92	`$val=chop($val);`
102	`if (preg_match('/^[[:space:]]#/',$val) \|\| preg_match('/^[[:space:]]$/',$val))`	93	`if (preg_match('/^[[:space:]]#/',$val) \|\| preg_match('/^[[:space:]]$/',$val))`
103	`continue;`	94	`continue;`
104	`list($key,$realm,$v)=preg_split("/:[[:space:]]*/",$val,3);`	95	`list($key,$realm,$v)=preg_split("/:[[:space:]]*/",$val,3);`
105	`if ($realm == 'accounting' \|\| $realm == 'userdb' \|\| $realm == 'nasdb' \|\| $realm == 'nasadmin')`	96	`if ($realm == 'accounting' \|\| $realm == 'userdb' \|\| $realm == 'nasdb' \|\| $realm == 'nasadmin')`
106	`$mappings["$key"][$realm] = $v;`	97	`$mappings["$key"][$realm] = $v;`
107	`if ($realm == 'nasdb'){`	98	`if ($realm == 'nasdb'){`
108	`$NAS_ARR = array();`	99	`$NAS_ARR = array();`
109	`$NAS_ARR = explode(',',$v);`	100	`$NAS_ARR = explode(',',$v);`
110	`foreach ($nas_list as $key => $nas){`	101	`foreach ($nas_list as $key => $nas){`
111	`foreach ($NAS_ARR as $nas_check){`	102	`foreach ($NAS_ARR as $nas_check){`
112	`if ($nas_check == $nas['name'])`	103	`if ($nas_check == $nas['name'])`
113	`unset($nas_list[$key]);`	104	`unset($nas_list[$key]);`
114	`}`	105	`}`
115	`}`	106	`}`
116	`}`	107	`}`
117	`}`	108	`}`
118	`if ($config['general_use_session'] == 'yes')`	109	`if ($config['general_use_session'] == 'yes')`
119	`session_register('mappings');`	110	`session_register('mappings');`
120	`}`	111	`}`
121		-
122	`//Include missing.php if needed`	-
123	`if (!function_exists('array_change_key_case'))`	-
124	`include_once('../lib/missing.php');`	-
125	`@header('Content-type: text/html; charset='.$config['general_charset'].';');`	112	`@header('Content-type: text/html; charset='.$config['general_charset'].';');`
126	`?>`	113	`?>`
127		114

Subversion Repositories ALCASAR

(root)/conf/freeradius-web/config.php – Rev 1836 → 3173