Commit:    0d0df72c143e095c8b28f056fc2876b8135d4c3b
Author:    Hannes Magnusson <[email protected]>         Sun, 16 Feb 2014 
12:17:23 -0800
Parents:   855faa692b4a4381677c8106051a31d517534e6a
Branches:  master

Link:       
http://git.php.net/?p=web/master.git;a=commitdiff;h=0d0df72c143e095c8b28f056fc2876b8135d4c3b

Log:
Fix username auditing

Changed paths:
  M  manage/mirrors.php


Diff:
diff --git a/manage/mirrors.php b/manage/mirrors.php
index 188415d..5533d8f 100644
--- a/manage/mirrors.php
+++ b/manage/mirrors.php
@@ -57,7 +57,7 @@ if (isset($id) && isset($hostname)) {
 
             // Perform a full data update on a mirror
             case "update":
-               $mod_by_time = '<b>'.strtoupper(date('d-M-Y H:i:s T')).'</b> 
['.$_SESSION["user"].'] Mirror updated';
+               $mod_by_time = '<b>'.strtoupper(date('d-M-Y H:i:s T')).'</b> 
['.$_SESSION["username"].'] Mirror updated';
                 $query = "UPDATE mirrors SET hostname='$hostname', 
active=$active, " .
                          "mirrortype=$mirrortype, cname='$cname', 
maintainer='".unmangle($maintainer)."', " .
                          "providername='".unmangle($providername)."', 
providerurl='$providerurl', " .
@@ -116,7 +116,7 @@ if (isset($id) && isset($hostname)) {
             // If a mirror has been modified, send information safe for public 
eyes to the
             // list: active status, hostname.
             } elseif ($mode == 'update') {
-                $body  = 'The mirror '.$hostname.' has been modified by 
'.$_SERVER["username"].'.  It\'s status is ';
+                $body  = 'The mirror '.$hostname.' has been modified by 
'.$_SESSION["username"].'.  It\'s status is ';
                 $body .= isset($active) && $active == true ? 'active.' : 
'inactive, and DNS will be disabled.';
                $body .= isset($acmt) && !empty($acmt) ? '  Notes were added to 
the mirror\'s file.' : '';
                @mail('[email protected]','[mirrors] Status change 
for '.$hostname,$body,"From: [email protected]\r\n", "[email protected]");


--
PHP Webmaster List Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to