| Server IP : 49.231.201.246 / Your IP : 216.73.216.149 Web Server : Apache/2.4.18 (Ubuntu) System : User : root ( 0) PHP Version : 7.0.33-0ubuntu0.16.04.16 Disable Function : exec,passthru,mail,shell_exec,system,proc_open,popen,ini_alter,dl,proc_close,curl_exec,curl_multi_exec,readfile,parse_ini_file,escapeshellarg,escapeshellcmd,show_source,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,mail,php_uname,phpinfo MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/webmin/webmin/ |
Upload File : |
#!/usr/bin/perl
# change_session.cgi
# Enable or disable session authentication
require './webmin-lib.pl';
&ReadParse();
&error_setup($text{'session_err'});
&foreign_require("acl");
&lock_file($ENV{'MINISERV_CONFIG'});
&get_miniserv_config(\%miniserv);
$miniserv{'passdelay'} = $in{'passdelay'};
# Save blocked hosts
if ($in{'blockhost_on'}) {
$in{'blockhost_time'} =~ /^\d+$/ && $in{'blockhost_time'} > 0 ||
&error($text{'session_eblockhost_time'});
$in{'blockhost_failures'} =~ /^\d+$/ && $in{'blockhost_failures'} > 0 ||
&error($text{'session_eblockhost_failures'});
$miniserv{'blockhost_time'} = $in{'blockhost_time'};
$miniserv{'blockhost_failures'} = $in{'blockhost_failures'};
}
else {
$miniserv{'blockhost_time'} = $miniserv{'blockhost_failures'} = undef;
}
# Save blocked users
if ($in{'blockuser_on'}) {
$in{'blockuser_time'} =~ /^\d+$/ && $in{'blockuser_time'} > 0 ||
&error($text{'session_eblockuser_time'});
$in{'blockuser_failures'} =~ /^\d+$/ && $in{'blockuser_failures'} > 0 ||
&error($text{'session_eblockuser_failures'});
$miniserv{'blockuser_time'} = $in{'blockuser_time'};
$miniserv{'blockuser_failures'} = $in{'blockuser_failures'};
}
else {
$miniserv{'blockuser_time'} = $miniserv{'blockuser_failures'} = undef;
}
$miniserv{'blocklock'} = $in{'blocklock'};
$miniserv{'syslog'} = $in{'syslog'};
if ($in{'session'} && $ENV{'HTTP_COOKIE'} !~ /sessiontest=1/i &&
!$ENV{'HTTP_WEBMIN_SERVERS'}) {
&error($text{'session_ecookie'});
}
if (defined($in{'session'})) {
$miniserv{'session'} = $in{'session'};
}
if ($in{'logouttime_on'}) {
$in{'logouttime'} =~ /^\d+$/ && $in{'logouttime'} > 0 ||
&error($text{'session_elogouttime'});
}
$miniserv{'logouttime'} = $in{'logouttime_on'} ? $in{'logouttime'} : undef;
if (defined($in{'localauth'})) {
if ($in{'localauth'}) {
$lsof = &has_command("lsof");
&error($text{'session_elsof'}) if (!$lsof);
$miniserv{'localauth'} = $lsof;
}
else {
delete($miniserv{'localauth'});
}
}
$miniserv{'no_pam'} = $in{'no_pam'};
if ($in{'passwd_file'}) {
$in{'passwd_file'} =~ /\|$/ || -r $in{'passwd_file'} ||
&error($text{'session_epasswd_file'});
$in{'passwd_uindex'} =~ /^\d+$/ ||
&error($text{'session_epasswd_uindex'});
$in{'passwd_pindex'} =~ /^\d+$/ ||
&error($text{'session_epasswd_pindex'});
$miniserv{'passwd_file'} = $in{'passwd_file'};
$miniserv{'passwd_uindex'} = $in{'passwd_uindex'};
$miniserv{'passwd_pindex'} = $in{'passwd_pindex'};
}
else {
delete($miniserv{'passwd_file'});
delete($miniserv{'passwd_uindex'});
delete($miniserv{'passwd_pindex'});
}
$miniserv{'pam_conv'} = $in{'pam_conv'};
$miniserv{'pam_end'} = $in{'pam_end'};
if ($in{'cmd_def'}) {
delete($gconfig{'passwd_cmd'});
}
else {
$in{'cmd'} =~ /\S/ && &has_command($in{'cmd'}) ||
&error($text{'session_ecmd'});
$gconfig{'passwd_cmd'} = $in{'cmd'};
}
if (defined($in{'extauth'})) {
if ($in{'extauth'}) {
$in{'extauth'} =~ /^(\S+)/ && -x $1 ||
&error($text{'session_eextauth'});
$miniserv{'extauth'} = $in{'extauth'};
}
else {
delete($miniserv{'extauth'});
}
}
if (defined($in{'passwd_mode'})) {
$miniserv{'passwd_mode'} = $in{'passwd_mode'};
}
$miniserv{'utmp'} = $in{'utmp'};
$miniserv{'session_ip'} = $in{'session_ip'};
&put_miniserv_config(\%miniserv);
&unlock_file($ENV{'MINISERV_CONFIG'});
if ($in{'passapi'}) {
&acl::setup_anonymous_access($password_change_path,
$password_change_mod);
}
else {
&acl::remove_anonymous_access($password_change_path,
$password_change_mod);
}
$gconfig{'passapi'} = $in{'passapi'};
&lock_file("$config_directory/config");
#$gconfig{'locking'} = $in{'locking'};
$gconfig{'noremember'} = !$in{'remember'};
$gconfig{'realname'} = $in{'realname'};
if ($in{'passwd_file'}) {
$gconfig{'passwd_file'} = $in{'passwd_file'};
$gconfig{'passwd_uindex'} = $in{'passwd_uindex'};
$gconfig{'passwd_pindex'} = $in{'passwd_pindex'};
}
else {
delete($gconfig{'passwd_file'});
delete($gconfig{'passwd_uindex'});
delete($gconfig{'passwd_pindex'});
}
if ($in{'banner_def'}) {
delete($gconfig{'loginbanner'});
}
else {
-r $in{'banner'} || &error($text{'session_ebanner'});
$gconfig{'loginbanner'} = $in{'banner'};
}
if ($in{'md5pass'} == 1) {
# MD5 enabled .. but is it supported by this system?
$need = &acl::check_md5();
$need && &error(&text('session_emd5mod', "<tt>$need</tt>"));
}
elsif ($in{'md5pass'} == 2) {
# SHA512 enabled .. check support
$need = &acl::check_sha512();
$need && &error(&text('session_esha512mod', "<tt>$need</tt>"));
}
elsif ($in{'md5pass'} == 3) {
# yescrypt enabled .. check support
$need = &acl::check_yescrypt();
$need && &error(&text('session_eyescrypt', "<tt>$need</tt>"));
}
$gconfig{'md5pass'} = $in{'md5pass'};
# Save forgotten password mode
if ($in{'forgot'} && &foreign_installed("virtualmin-password-recovery") &&
$text{'session_postfix'} =~ /virtualmin-password-recovery/) {
&error(&text('session_eforgot', 'edit_mods.cgi?tab=delete'));
}
$gconfig{'forgot_pass'} = $in{'forgot'};
# Save bad password requests
if ($in{'blockpass_on'}) {
$in{'passreset_time'} =~ /^\d+$/ && $in{'passreset_time'} > 0 ||
&error($text{'session_eblockhost_time'});
$in{'passreset_failures'} =~ /^\d+$/ && $in{'passreset_failures'} > 0 ||
&error($text{'session_epassreset_failures'});
$gconfig{'passreset_time'} = $in{'passreset_time'};
$gconfig{'passreset_failures'} = $in{'passreset_failures'};
}
else {
$gconfig{'passreset_time'} = $gconfig{'passreset_failures'} = undef;
}
# Password expiry
$in{'passreset_timeout'} =~ /^\d+$/ && $in{'passreset_timeout'} > 0 ||
&error($text{'session_epassreset_timeout'});
$gconfig{'passreset_timeout'} = $in{'passreset_timeout'};
&write_file("$config_directory/config", \%gconfig);
&unlock_file("$config_directory/config");
&show_restart_page();
&webmin_log("session", undef, undef, \%in);