Author: toad
Date: 2006-03-14 00:45:50 +0000 (Tue, 14 Mar 2006)
New Revision: 8244

Modified:
   trunk/freenet/src/freenet/clients/http/ConfigToadlet.java
   trunk/freenet/src/freenet/node/Version.java
Log:
534:
Temporarily disable configtoadlet due to serious security issues.

Modified: trunk/freenet/src/freenet/clients/http/ConfigToadlet.java
===================================================================
--- trunk/freenet/src/freenet/clients/http/ConfigToadlet.java   2006-03-14 
00:31:13 UTC (rev 8243)
+++ trunk/freenet/src/freenet/clients/http/ConfigToadlet.java   2006-03-14 
00:45:50 UTC (rev 8244)
@@ -82,28 +82,29 @@
                        this.writeReply(ctx, 200, "text/html", "OK", 
buf.toString());

                } else {
-                       for(int i=0; i<sc.length ; i++){
-                               Option[] o = sc[i].getOptions();
-                               String prefix = new String(sc[i].getPrefix());
-                               String configName;
-                               
-                               for(int j=0; j<o.length; j++){
-                                       configName=o[j].getName();
-                                       
-                                       // we ignore unreconized parameters 
-                                       
if(request.getParam(prefix+"."+configName) != ""){
-                                               if(o[j].getValueString() != 
request.getParam(prefix+"."+configName)){
-                                                       try{
-                                                               
o[j].setValue(request.getParam(prefix+"."+configName));
-                                                       }catch(Exception e){
-                                                               
buf.append(e+"\n");
-                                                       }
-                                               }
-                                       }
-                               }
-                       }
-                       config.store();
-                       writeReply(ctx, 200, "text/html", "OK", 
mkForwardPage(ctx, "Applying configuration", buf.toString(), "/config/", 10));
+                       return;
+//                     for(int i=0; i<sc.length ; i++){
+//                             Option[] o = sc[i].getOptions();
+//                             String prefix = new String(sc[i].getPrefix());
+//                             String configName;
+//                             
+//                             for(int j=0; j<o.length; j++){
+//                                     configName=o[j].getName();
+//                                     
+//                                     // we ignore unreconized parameters 
+//                                     
if(request.getParam(prefix+"."+configName) != ""){
+//                                             if(o[j].getValueString() != 
request.getParam(prefix+"."+configName)){
+//                                                     try{
+//                                                             
o[j].setValue(request.getParam(prefix+"."+configName));
+//                                                     }catch(Exception e){
+//                                                             
buf.append(o[j].getName()+" "+e+"\n");
+//                                                     }
+//                                             }
+//                                     }
+//                             }
+//                     }
+//                     config.store();
+//                     writeReply(ctx, 200, "text/html", "OK", 
mkForwardPage(ctx, "Applying configuration", buf.toString(), "/config/", 10));
                }
        }


Modified: trunk/freenet/src/freenet/node/Version.java
===================================================================
--- trunk/freenet/src/freenet/node/Version.java 2006-03-14 00:31:13 UTC (rev 
8243)
+++ trunk/freenet/src/freenet/node/Version.java 2006-03-14 00:45:50 UTC (rev 
8244)
@@ -20,7 +20,7 @@
        public static final String protocolVersion = "1.0";

        /** The build number of the current revision */
-       private static final int buildNumber = 533;
+       private static final int buildNumber = 534;

        /** Oldest build of Fred we will talk to */
        private static final int lastGoodBuild = 507;


Reply via email to