urlencode() all occurrences of the $login variable when used in url's. Bug noted...

diff --git a/Changelog b/Changelog
index 23d6b4e8343e82527f08039718d3844ef1a9e17a..e2c525e5bdc4f5a0cf92a9799e92d0cf42c3f410 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -23,6 +23,7 @@ Ver 1.78:
   long time ago. Bug noted by Nick Bright
 * In user_finger only set LD_LIBRARY_PATH once, not each time we call snmpfinger
 * Add support for usrhiper in snmpfinger. Patch from Nick Bright
+* urlencode() all occurrences of the $login variable when used in url's. Bug noted by Dag Landau
 Ver 1.75:
 * A LOT of security related fixes. Now dialupadmin should hopefully be secure enough to
   be accessed by normal users (not administrators).

diff --git a/htdocs/accounting.php3 b/htdocs/accounting.php3
index 5f618cb2f5f72f1ab703d3f7d69e17858cc93230..93d80ae29b234188b7204c288c0e63034407e88e 100644 (file)
--- a/htdocs/accounting.php3
+++ b/htdocs/accounting.php3
@@ -281,8 +281,10 @@ echo "</tr>\n";
                                if ($info == '')
                                        $info = '-';
                                $info = $sql_attrs[$val][func]($info);
-                               if ($val == 'username')
-                                       $info = "<a href=\"user_admin.php3?login=$info\" title=\"Edit user $info\">$info<a/>";
+                               if ($val == 'username'){
+                                       $Info = urlencode($info);
+                                       $info = "<a href=\"user_admin.php3?login=$Info\" title=\"Edit user $info\">$info<a/>";
+                               }
                                echo <<<EOM
                        <td>$info</td>
 EOM;

diff --git a/htdocs/badusers.php3 b/htdocs/badusers.php3
index ada74222b13cf47c9e4eb6ed42d3a1aebd6d4154..631ecc386ecde9f4408f2ccaeb7ba9bbe5ab3327 100644 (file)
--- a/htdocs/badusers.php3
+++ b/htdocs/badusers.php3
@@ -153,6 +153,7 @@ if ($link){
                        $num++;
                        $id = $row[id];
                        $user = "$row[username]";
+                       $User = urlencode($user);
                        $date = "$row[date]";
                        $reason = "$row[reason]";
                        $admin = "$row[admin]";
@@ -167,7 +168,7 @@ if ($link){
                        echo <<<EOM
                        <tr align=center>
                                <td>$num</td>
-                               <td><a href="user_admin.php3?login=$user" title="Edit user $user">$user</a></td>
+                               <td><a href="user_admin.php3?login=$User" title="Edit user $user">$user</a></td>
                                <td>$date</td>
                                <td>$admin</td>
                                <td>$reason</td>

diff --git a/htdocs/find.php3 b/htdocs/find.php3
index bde88d54feca355730c70c4de8675e8314d86a1b..f83ac7e81d252ff44da17d98c8ef711eac82b2d8 100644 (file)
--- a/htdocs/find.php3
+++ b/htdocs/find.php3
@@ -51,11 +51,12 @@ EOM;
                foreach ($found_users as $user){
                        if ($user == '')
                                $user = '-';
+                       $User = urlencode($user);
                        $num++;
                        $msg .= <<<EOM
                        <tr align=center>
                                <td>$num</td>
-                               <td><a href="user_admin.php3?login=$user" title="Edit user $user">$user</a></td>
+                               <td><a href="user_admin.php3?login=$User" title="Edit user $user">$user</a></td>
                        </tr>
 EOM;
                }

diff --git a/htdocs/show_groups.php3 b/htdocs/show_groups.php3
index 0f72febd10b6f2a7582ea2de72a486043f3ecd6c..b17e3148e9329d509b085185f1ae3fb9ca331b38 100644 (file)
--- a/htdocs/show_groups.php3
+++ b/htdocs/show_groups.php3
@@ -75,10 +75,11 @@ include_once("../lib/$config[general_lib_type]/group_info.php3");
 if (isset($existing_groups)){
        foreach ($existing_groups as $group => $num_members){
                $num++;
+               $Group = urlencode($group);
                echo <<<EOM
                <tr align=center>
                        <td>$num</td>
-                       <td><a href="group_admin.php3?login=$group" title="Edit group $group">$group</a></td>
+                       <td><a href="group_admin.php3?login=$Group" title="Edit group $group">$group</a></td>
                        <td>$num_members</td>
                </tr>
 EOM;

diff --git a/htdocs/user_finger.php3 b/htdocs/user_finger.php3
index e8696d669ba1784ce48632496a1db91e54ae01e9..db10017654530fc2b18a59de340e21ee07e948bb 100644 (file)
--- a/htdocs/user_finger.php3
+++ b/htdocs/user_finger.php3
@@ -184,13 +184,14 @@ EOM;
                $user = $finger_info[$j][$k][user];
                if ($user == '')
                        $user = ' ';
+               $User = urlencode($user);
                $time = $finger_info[$j][$k][session_time];
                $ip = $finger_info[$j][$k][ip];
                $cid = $finger_info[$j][$k][callerid];
                $inf = $user_info[$user];
                echo <<<EOM
        <tr align=center>
-       <td>$k</td><td><a href="user_admin.php3?login=$user" title="Edit User $user">$user</a></td>
+       <td>$k</td><td><a href="user_admin.php3?login=$User" title="Edit User $user">$user</a></td>
 EOM;
 if ($acct_attrs['uf'][4] != '') echo "<td>$ip</td>\n";
 if ($acct_attrs['uf'][9] != '') echo "<td>$cid</td>\n";

diff --git a/htdocs/user_stats.php3 b/htdocs/user_stats.php3
index 17b516e6a3bc35081139d62c4dbce0c4d3b5f223..0ba2b18910d5e5ed6028fa178c562271c9989121 100644 (file)
--- a/htdocs/user_stats.php3
+++ b/htdocs/user_stats.php3
@@ -120,8 +120,10 @@ if ($link){
                        $acct_login = $row[username];
                        if ($acct_login == '')
                                $acct_login = '-';
-                       else
-                               $acct_login = "<a href=\"user_admin.php3?login=$acct_login\" title=\"Edit user $acct_login\">$acct_login</a>";
+                       else{
+                               $Acct_login = urlencode($acct_login);
+                               $acct_login = "<a href=\"user_admin.php3?login=$Acct_login\" title=\"Edit user $acct_login\">$acct_login</a>";
+                       }
                        $acct_time = $row[conntotduration];
                        $acct_time = time2str($acct_time);
                        $acct_conn_num = $row[connnum];

diff --git a/html/group_toolbar.html.php3 b/html/group_toolbar.html.php3
index 0763565720ae4f6a4ae53429dd311795e93e02ad..c31d5998b6603bf411238bbad77694bdfc62d461 100644 (file)
--- a/html/group_toolbar.html.php3
+++ b/html/group_toolbar.html.php3
@@ -1,12 +1,13 @@
 <?php
+$Login = urlencode($login);
 print <<<EOM
 <tr valign=top>
 <td align=center bgcolor="black" width=100>
-<a href="group_admin.php3?login=$login" title="Administer Group"><font color="white"><b>ADMIN</b></font></a></td>
+<a href="group_admin.php3?login=$Login" title="Administer Group"><font color="white"><b>ADMIN</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_edit.php3?login=$login&user_type=group" title="Edit Group Dialup Settings"><font color="white"><b>EDIT</b></font></a></td>
+<a href="user_edit.php3?login=$Login&user_type=group" title="Edit Group Dialup Settings"><font color="white"><b>EDIT</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_delete.php3?login=$login&user_type=group" title="Delete Group"><font color="white"><b>DELETE</b></font></a></td>
+<a href="user_delete.php3?login=$Login&user_type=group" title="Delete Group"><font color="white"><b>DELETE</b></font></a></td>
 </tr>
 EOM;
 ?>

diff --git a/html/user_toolbar.html.php3 b/html/user_toolbar.html.php3
index 8ac6db5a8b4416c020f13ad5bd63d7bccc7f4428..892ee43ef052d7b782edcc08d2e1d5d79336ef5e 100644 (file)
--- a/html/user_toolbar.html.php3
+++ b/html/user_toolbar.html.php3
@@ -1,27 +1,28 @@
 <?php
+$Login = urlencode($login);
 print <<<EOM
 <tr valign=top>
 <td align=center bgcolor="black" width=100>
-<a href="user_admin.php3?login=$login" title="Show User Information"><font color="white"><b>SHOW</b></font></a></td>
+<a href="user_admin.php3?login=$Login" title="Show User Information"><font color="white"><b>SHOW</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_edit.php3?login=$login" title="Change User Dialup Settings"><font color="white"><b>EDIT</b></font></a></td>
+<a href="user_edit.php3?login=$Login" title="Change User Dialup Settings"><font color="white"><b>EDIT</b></font></a></td>
 <td align=center bgcolor="black" width=200 colspan=2>
-<a href="user_info.php3?login=$login" title="Change User Personal Information"><font color="white"><b>USER INFO</b></font></a></td>
+<a href="user_info.php3?login=$Login" title="Change User Personal Information"><font color="white"><b>USER INFO</b></font></a></td>
 </tr>
 <tr valign=top>
 <td align=center bgcolor="black" width=100>
-<a href="user_accounting.php3?login=$login" title="Show User Accounting Information"><font color="white"><b>ACCOUNTING</b></font></a></td>
+<a href="user_accounting.php3?login=$Login" title="Show User Accounting Information"><font color="white"><b>ACCOUNTING</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="badusers.php3?login=$login" title="Show User Unauthorized Actions"><font color="white"><b>BADUSERS</b></font></a></td>
+<a href="badusers.php3?login=$Login" title="Show User Unauthorized Actions"><font color="white"><b>BADUSERS</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_delete.php3?login=$login" title="Delete User"><font color="white"><b>DELETE</b></font></a></td>
+<a href="user_delete.php3?login=$Login" title="Delete User"><font color="white"><b>DELETE</b></font></a></td>
 <td align=center bgcolor="black" width=100>
-<a href="user_test.php3?login=$login" title="Test User"><font color="white"><b>TEST</b></font></a></td>
+<a href="user_test.php3?login=$Login" title="Test User"><font color="white"><b>TEST</b></font></a></td>
 </tr>
 <tr valign=top>
 <td align=center width=100></td>
 <td align=center bgcolor="black" width=200 colspan=2>
-<a href="clear_opensessions.php3?login=$login" title="Clear Open User Sessions"><font color="white"><b>OPEN SESSIONS</b></font></a></td>
+<a href="clear_opensessions.php3?login=$Login" title="Clear Open User Sessions"><font color="white"><b>OPEN SESSIONS</b></font></a></td>
 <td align=center width=100></td>
 </tr>
 EOM;