[Phpgroupware-cvs] phpgwapi/inc/class.setup.inc.php, 1.15.2.17

[nomail]

Update of /phpgwapi/inc
Modified Files:
        Branch: Version-0_9_16-branch
          class.setup.inc.php

date: 2004/07/27 10:32:23;  author: skwashd;  state: Exp;  lines: +13 -13

Log Message:
security fix
=====================================================================
Index: phpgwapi/inc/class.setup.inc.php
diff -u phpgwapi/inc/class.setup.inc.php:1.15.2.16 
phpgwapi/inc/class.setup.inc.php:1.15.2.17
--- phpgwapi/inc/class.setup.inc.php:1.15.2.16  Fri May 21 03:07:58 2004
+++ phpgwapi/inc/class.setup.inc.php    Tue Jul 27 10:32:23 2004
@@ -109,8 +109,8 @@
                                /* header admin login */
                                if($FormPW == 
stripslashes($GLOBALS['phpgw_info']['server']['header_admin_password']))
                                {
-                                       
setcookie('HeaderPW',"$FormPW","$expire");
-                                       
setcookie('ConfigLang',"$ConfigLang","$expire");
+                                       
setcookie('HeaderPW',md5($FormPW),$expire);
+                                       
setcookie('ConfigLang',$ConfigLang,$expire);
                                        return True;
                                }
                                else
@@ -125,9 +125,9 @@
                                /* config login */
                                if($FormPW == 
stripslashes(@$GLOBALS['phpgw_domain'][$FormDomain]['config_passwd']))
                                {
-                                       
setcookie('ConfigPW',"$FormPW","$expire");
-                                       
setcookie('ConfigDomain',"$FormDomain","$expire");
-                                       
setcookie('ConfigLang',"$ConfigLang","$expire");
+                                       setcookie('ConfigPW', md5($FormPW), 
$expire);
+                                       setcookie('ConfigDomain', $FormDomain, 
$expire);
+                                       setcookie('ConfigLang', $ConfigLang, 
$expire);
                                        return True;
                                }
                                else
@@ -166,11 +166,11 @@
                        elseif(!empty($ConfigPW) && $auth_type == 'Config')
                        {
                                /* Returning after login to config */
-                               if($ConfigPW == 
stripslashes($GLOBALS['phpgw_domain'][$ConfigDomain]['config_passwd']))
+                               if($ConfigPW == 
md5(stripslashes($GLOBALS['phpgw_domain'][$ConfigDomain]['config_passwd'])))
                                {
-                                       
setcookie('ConfigPW',"$ConfigPW","$expire");
-                                       
setcookie('ConfigDomain',"$ConfigDomain","$expire");
-                                       
setcookie('ConfigLang',"$ConfigLang","$expire");
+                                       setcookie('ConfigPW', $ConfigPW,  
$expire);
+                                       setcookie('ConfigDomain', 
$ConfigDomain, $expire);
+                                       setcookie('ConfigLang', $ConfigLang, 
$expire);
                                        return True;
                                }
                                else
@@ -183,10 +183,10 @@
                        elseif(!empty($HeaderPW) && $auth_type == 'Header')
                        {
                                /* Returning after login to header admin */
-                               if($HeaderPW == 
stripslashes($GLOBALS['phpgw_info']['server']['header_admin_password']))
+                               if($HeaderPW == 
md5(stripslashes($GLOBALS['phpgw_info']['server']['header_admin_password'])))
                                {
-                                       
setcookie('HeaderPW',"$HeaderPW","$expire");
-                                       
setcookie('ConfigLang',"$ConfigLang","$expire");
+                                       setcookie('HeaderPW', $HeaderPW , 
$expire);
+                                       setcookie('ConfigLang', $ConfigLang, 
$expire);
                                        return True;
                                }
                                else