composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-05-17 06:18:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

N°1114 - config-itop.php access rights enforcement

Browse Source
This commit is contained in:
Eric
2019-10-22 15:02:51 +02:00
parent 8b37f503c7
commit 3f59141407
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
datamodels/2.x/itop-backup/dbrestore.class.inc.php
View File

@@ -186,7 +186,7 @@ class DBRestore extends DBBackup
$sConfigFile = APPROOT.'conf/'.$sEnvironment.'/config-itop.php';
@chmod($sConfigFile, 0770); // Allow overwriting the file
rename($sDataDir.'/config-itop.php', $sConfigFile);
@chmod($sConfigFile, 0444); // Read-only
@chmod($sConfigFile, 0440); // Read-only
try
{

2
datamodels/2.x/itop-config/config.php
View File

@@ -176,7 +176,7 @@ try
$oTempConfig = new Config($sTmpFile, true);
$oTempConfig->WriteToFile($sConfigFile);
@unlink($sTmpFile);
@chmod($sConfigFile, 0444); // Read-only
@chmod($sConfigFile, 0440); // Read-only
if (DBPasswordInNewConfigIsOk($sConfig))
{