--- docman.php 2001/12/14 16:58:27 1.48 +++ docman.php 2001/12/17 10:00:51 1.51 @@ -174,7 +174,21 @@ - - - [logout] + + []
Document Manager , based on ANYPORTAL(php) Site Manager @@ -701,7 +715,7 @@ CELLSPACING=3 WIDTH=\"100%\">" ; // updir bar - if ($fsDir != $fsRoot) { + if (chopsl($fsDir) != chopsl($fsRoot)) { $parent = dirname($relDir) ; if ($parent == "") $parent = "/" ; ?> @@ -950,6 +964,8 @@ $title = "(401 Unauthorized)" ; $text = "No trespassing !" ; + + global $PHP_AUTH_USER,$PHP_AUTH_PW,$gblPw,$relogin; StartHTML($title,$text) ; EndHTML() ; @@ -1205,6 +1221,13 @@ ////////////////////////////////////////////////////////////////// +function chopsl($path) { + if (substr($path,strlen($path)-1,1) == "/") $path=substr($path,0,strlen($path)-1); + $path=str_replace("//","/",$path); + return $path; +} + +////////////////////////////////////////////////////////////////// // MAIN PROGRAM // ============ // query parameters: capital letters @@ -1236,9 +1259,24 @@ Error("Configuration error","Can't find user handling module at $gblIncDir/$gblUsers.php ! Please fix $fsScriptDir/.docman.conf"); } + // if no password, or empty password logout + if ( + isset($PHP_AUTH_USER) && ( + !isset($relogin) || ( + isset($relogin) && $relogin != md5($PHP_AUTH_USER.$PHP_AUTH_PW) + ) + ) && ( + $PHP_AUTH_PW == "" || !isset($PHP_AUTH_PW) + ) + ) { + StartHTML("Logout completed","Your login credentials has been erased") ; + EndHTML() ; + exit ; + } + // authentication failure if ( md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $gblPw || - isset($relogin) && $gblPw == $relogin ) { + isset($relogin) && $gblPw == $relogin) { header("WWW-authenticate: basic realm=\"$HTTP_HOST\"") ; header("HTTP/1.0 401 Unauthorized") ; NoEntry() ; @@ -1462,6 +1500,7 @@ // $A=Co : checkout file $D/$F // $A=Ci : checkin file $D/$F // $A=V : view file (do nothing except log) + // $A=I : include file .$F.php from $gblFsRoot // default : display directory $D switch ($A) { @@ -1521,6 +1560,19 @@ DisplayChangeLog(1); EndHTML() ; exit; + case "I" : + $F=stripSlashes($F); + $inc_file="${gblFsRoot}/.${F}.php"; + if (!isset($F) || $F == "" || !file_exists($inc_file)) Error("Fatal error $inc_file"); // can't find file to include + if (!is_readable($inc_file)) + Error("Read access to include file denied",".${F}.php"); + $text = "Your include file should define \$text variable which holds this text and \$title variable which is page title"; + $title = "You should define \$title variable with page title"; + include($inc_file); + StartHTML($title, $text) ; + print "

".GifIcon(up)." Back to front page.

"; + EndHTML() ; + exit ; } // default: display directory $relDir