[Phpgroupware-cvs] CVS: phpwebhosting index.php,1.30.2.2,1.30.2.3

[Jason Wies <address@hidden>]

Update of /cvsroot/phpgroupware/phpwebhosting
In directory subversions:/tmp/cvs-serv24512

Modified Files:
      Tag: Version-0_9_14-branch
        index.php 
Log Message:
Fix group directory creation, remove possible security problem

Index: index.php
===================================================================
RCS file: /cvsroot/phpgroupware/phpwebhosting/index.php,v
retrieving revision 1.30.2.2
retrieving revision 1.30.2.3
diff -C2 -r1.30.2.2 -r1.30.2.3
*** index.php   10 Feb 2002 04:37:57 -0000      1.30.2.2
--- index.php   25 Feb 2002 03:56:37 -0000      1.30.2.3
***************
*** 245,268 ****
        $GLOBALS['phpgw']->vfs->override_acl = 0;
  }
- elseif (preg_match ('|^'.$GLOBALS['fakebase'].'\/(.*)$|U', $path, $matches))
- {
-       if (!$GLOBALS['phpgw']->vfs->file_exists (array ('string' => $path, 
'relatives' => array (RELATIVE_NONE))))
-       {
-               $GLOBALS['phpgw']->vfs->override_acl = 1;
-               $GLOBALS['phpgw']->vfs->mkdir (array ('string' => $path, 
'relatives' => array (RELATIVE_NONE)));
-               $GLOBALS['phpgw']->vfs->override_acl = 0;
- 
-               $group_id = $GLOBALS['phpgw']->accounts->name2id ($matches[1]);
-               $GLOBALS['phpgw']->vfs->set_attributes (array (
-                               'string'        => $path,
-                               'relatives'     => array (RELATIVE_NONE),
-                               'attributes'    => array (
-                                                       'owner_id' => $group_id,
-                                                       'createdby_id' => 
$group_id
-                                               )
-                       )
-               );
-       }
- }
  
  ###
--- 245,248 ----
***************
*** 356,359 ****
--- 336,340 ----
                )
                {
+                       $GLOBALS['phpgw']->vfs->override_acl = 1;
                        $GLOBALS['phpgw']->vfs->mkdir (array (
                                        'string'        => 
$GLOBALS['fakebase'].'/'.$group_array['account_name'],
***************
*** 361,364 ****
--- 342,346 ----
                                )
                        );
+                       $GLOBALS['phpgw']->vfs->override_acl = 0;
  
                        $GLOBALS['phpgw']->vfs->set_attributes (array (