[interchange] * Remove SQLPASS as suggested password, use MailOrderTo or one custom-set.

Mike Heins interchange-cvs at icdevgroup.org
Tue Mar 25 18:17:03 UTC 2014


commit 5e7f66dba084e83aac6607362aaf158c84e92b2e
Author: Mike Heins <heins at icdevgroup.com>
Date:   Tue Mar 25 14:10:16 2014 -0400

    * Remove SQLPASS as suggested password, use MailOrderTo or one custom-set.
    * Make dump permission persistent after providing password once.
    * Make dump permission automatic if logged in as admin.

 dist/standard/pages/dump.html |   17 ++++++++++++++---
 1 files changed, 14 insertions(+), 3 deletions(-)
---
diff --git a/dist/standard/pages/dump.html b/dist/standard/pages/dump.html
index dd6b13d..d9e0879 100644
--- a/dist/standard/pages/dump.html
+++ b/dist/standard/pages/dump.html
@@ -1,7 +1,14 @@
 [calc]
     $Tag->tmp('tmp_gate_dump');
-    $pass = $Variable->{SQLPASS} || $Variable->{ORDERS_TO} || $Config->{MailOrderTo} || 'bogus';
-    if($CGI->{password} eq $pass) {
+    $pass = $Variable->{DUMP_PASSWORD} || $Variable->{ORDERS_TO} || $Config->{MailOrderTo}
+		or return;
+    if(
+		$Session->{given_dump_password}
+		or $Session->{admin}
+		or $CGI->{password} eq $pass
+		)
+	{
+		$Session->{given_dump_password} = 1;
         $Scratch->{tmp_gate_dump} = 1;
     } 
     $CGI->{sort} = 1 unless defined $CGI->{sort};
@@ -10,10 +17,14 @@
 [if scratch tmp_gate_dump]
 <xmp>[dump key="[cgi key]" sort="[cgi sort]"]</xmp>
 [else]
-    You must provide the password. It is usually the SQL server password, or the email address where orders go.
+    You must provide the password. It is usually the email address where orders go.
     <form action="[process href=@@MV_PAGE@@ secure=1]" METHOD=post>
     Password: <input type="text" name=password value="">
     <input type="submit" value="Dump">
+	<br>
+	sort keys
+	<input type=radio name=sort value=1 checked> yes 
+	<input type=radio name=sort value=0> no 
     </form>
 [/else]
 [/if]



More information about the interchange-cvs mailing list