247 lines
8.9 KiB
PHP
247 lines
8.9 KiB
PHP
<?php
|
|
/* Copyright (C) 2004-2013 Laurent Destailleur <eldy@users.sourceforge.net>
|
|
* Copyright (C) 2005-2012 Regis Houssin <regis.houssin@inodbox.com>
|
|
* Copyright (C) 2013 Juanjo Menent <jmenent@2byte.es>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
/**
|
|
* \file htdocs/admin/security_other.php
|
|
* \ingroup core
|
|
* \brief Security options setup
|
|
*/
|
|
|
|
// Load Dolibarr environment
|
|
require '../main.inc.php';
|
|
require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';
|
|
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
|
|
require_once DOL_DOCUMENT_ROOT.'/core/class/html.formfile.class.php';
|
|
|
|
// Load translation files required by the page
|
|
$langs->loadLangs(array("users", "admin", "other"));
|
|
|
|
if (!$user->admin) {
|
|
accessforbidden();
|
|
}
|
|
|
|
$action = GETPOST('action', 'aZ09');
|
|
|
|
|
|
|
|
/*
|
|
* Actions
|
|
*/
|
|
|
|
if (preg_match('/set_([a-z0-9_\-]+)/i', $action, $reg)) {
|
|
$code = $reg[1];
|
|
$value = (GETPOST($code, 'alpha') ? GETPOST($code, 'alpha') : 1);
|
|
if (dolibarr_set_const($db, $code, $value, 'chaine', 0, '', $conf->entity) > 0) {
|
|
header("Location: ".$_SERVER["PHP_SELF"]);
|
|
exit;
|
|
} else {
|
|
dol_print_error($db);
|
|
}
|
|
} elseif (preg_match('/del_([a-z0-9_\-]+)/i', $action, $reg)) {
|
|
$code = $reg[1];
|
|
if (dolibarr_del_const($db, $code, $conf->entity) > 0) {
|
|
header("Location: ".$_SERVER["PHP_SELF"]);
|
|
exit;
|
|
} else {
|
|
dol_print_error($db);
|
|
}
|
|
} elseif ($action == 'updateform') {
|
|
$res1 = 1;
|
|
$res2 = 1;
|
|
$res3 = 1;
|
|
$res4 = 1;
|
|
$res5 = 1;
|
|
if (GETPOSTISSET('MAIN_APPLICATION_TITLE')) {
|
|
$res1 = dolibarr_set_const($db, "MAIN_APPLICATION_TITLE", GETPOST("MAIN_APPLICATION_TITLE", 'alphanohtml'), 'chaine', 0, '', $conf->entity);
|
|
}
|
|
if (GETPOSTISSET('MAIN_SESSION_TIMEOUT')) {
|
|
$res2 = dolibarr_set_const($db, "MAIN_SESSION_TIMEOUT", GETPOST("MAIN_SESSION_TIMEOUT", 'alphanohtml'), 'chaine', 0, '', $conf->entity);
|
|
}
|
|
if (GETPOSTISSET('MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT')) {
|
|
$res3 = dolibarr_set_const($db, "MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT", GETPOST("MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT", 'alphanohtml'), 'int', 0, '', $conf->entity);
|
|
}
|
|
if (GETPOSTISSET('MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS')) {
|
|
$res4 = dolibarr_set_const($db, "MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS", GETPOST("MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS", 'alphanohtml'), 'int', 0, '', $conf->entity);
|
|
}
|
|
if (GETPOSTISSET('MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS')) {
|
|
$res5 = dolibarr_set_const($db, "MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS", GETPOST("MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS", 'alphanohtml'), 'int', 0, '', $conf->entity);
|
|
}
|
|
if ($res1 && $res2 && $res3 && $res4 && $res5) {
|
|
setEventMessages($langs->trans("RecordModifiedSuccessfully"), null, 'mesgs');
|
|
}
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
* View
|
|
*/
|
|
|
|
$form = new Form($db);
|
|
|
|
$wikihelp = 'EN:Setup_Security|FR:Paramétrage_Sécurité|ES:Configuración_Seguridad';
|
|
llxHeader('', $langs->trans("Miscellaneous"), $wikihelp, '', 0, 0, '', '', '', 'mod-admin page-security_other');
|
|
|
|
print load_fiche_titre($langs->trans("SecuritySetup"), '', 'title_setup');
|
|
|
|
print '<span class="opacitymedium">'.$langs->trans("MiscellaneousDesc")."</span><br>\n";
|
|
print "<br>\n";
|
|
|
|
|
|
|
|
print '<form action="'.$_SERVER["PHP_SELF"].'" method="POST">';
|
|
print '<input type="hidden" name="token" value="'.newToken().'">';
|
|
print '<input type="hidden" name="action" value="updateform">';
|
|
|
|
$head = security_prepare_head();
|
|
|
|
print dol_get_fiche_head($head, 'misc', '', -1);
|
|
|
|
print '<br>';
|
|
|
|
// Other Options
|
|
print '<table class="noborder centpercent">';
|
|
print '<tr class="liste_titre">';
|
|
print '<td colspan="3">'.$langs->trans("Parameters").'</td>';
|
|
print '<td class="right" width="100">'.$langs->trans("Status").'</td>';
|
|
print '</tr>';
|
|
|
|
// Enable Captcha code
|
|
print '<tr class="oddeven">';
|
|
print '<td colspan="3">'.$langs->trans("UseCaptchaCode").'</td>';
|
|
print '<td class="right">';
|
|
if (function_exists("imagecreatefrompng")) {
|
|
if (!empty($conf->use_javascript_ajax)) {
|
|
print ajax_constantonoff('MAIN_SECURITY_ENABLECAPTCHA');
|
|
} else {
|
|
if (!getDolGlobalString('MAIN_SECURITY_ENABLECAPTCHA')) {
|
|
print '<a href="'.$_SERVER['PHP_SELF'].'?action=set_MAIN_SECURITY_ENABLECAPTCHA&token='.newToken().'">'.img_picto($langs->trans("Disabled"), 'off').'</a>';
|
|
} else {
|
|
print '<a href="'.$_SERVER['PHP_SELF'].'?action=del_MAIN_SECURITY_ENABLECAPTCHA&token='.newToken().'">'.img_picto($langs->trans("Enabled"), 'on').'</a>';
|
|
}
|
|
}
|
|
} else {
|
|
$desc = $form->textwithpicto('', $langs->transnoentities("EnableGDLibraryDesc"), 1, 'warning');
|
|
print $desc;
|
|
}
|
|
print '</td></tr>';
|
|
|
|
// Enable advanced perms
|
|
print '<tr class="oddeven">';
|
|
print '<td colspan="3">'.$langs->trans("UseAdvancedPerms").'</td>';
|
|
print '<td class="right">';
|
|
if (!empty($conf->use_javascript_ajax)) {
|
|
print ajax_constantonoff('MAIN_USE_ADVANCED_PERMS');
|
|
} else {
|
|
if (!getDolGlobalString('MAIN_USE_ADVANCED_PERMS')) {
|
|
print '<a href="'.$_SERVER['PHP_SELF'].'?action=set_MAIN_USE_ADVANCED_PERMS&token='.newToken().'">'.img_picto($langs->trans("Disabled"), 'off').'</a>';
|
|
} else {
|
|
print '<a href="'.$_SERVER['PHP_SELF'].'?action=del_MAIN_USE_ADVANCED_PERMS&token='.newToken().'">'.img_picto($langs->trans("Enabled"), 'on').'</a>';
|
|
}
|
|
}
|
|
print "</td></tr>";
|
|
|
|
print '</table>';
|
|
|
|
|
|
print '<br>';
|
|
|
|
|
|
// Timeout
|
|
print '<table width="100%" class="noborder">';
|
|
print '<tr class="liste_titre">';
|
|
print '<td colspan="2">'.$langs->trans("Parameters").'</td>';
|
|
print '<td>'.$langs->trans("Value").'</td>';
|
|
print "</tr>\n";
|
|
|
|
|
|
$sessiontimeout = ini_get("session.gc_maxlifetime");
|
|
if (!getDolGlobalString('MAIN_SESSION_TIMEOUT')) {
|
|
$conf->global->MAIN_SESSION_TIMEOUT = $sessiontimeout;
|
|
}
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$langs->trans("SessionTimeOut").'</td><td class="right">';
|
|
if (ini_get("session.gc_probability") == 0) {
|
|
print $form->textwithpicto('', $langs->trans("SessionsPurgedByExternalSystem", ini_get("session.gc_maxlifetime")));
|
|
} else {
|
|
print $form->textwithpicto('', $langs->trans("SessionExplanation", ini_get("session.gc_probability"), ini_get("session.gc_divisor"), ini_get("session.gc_maxlifetime")));
|
|
}
|
|
print '</td>';
|
|
print '<td class="nowrap">';
|
|
print '<input class="flat right width50" name="MAIN_SESSION_TIMEOUT" type="text" value="'.getDolGlobalInt('MAIN_SESSION_TIMEOUT').'"> '.strtolower($langs->trans("Seconds"));
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$langs->trans("MaxNumberOfImagesInGetPost").'</td><td class="right">';
|
|
print '</td>';
|
|
print '<td class="nowrap">';
|
|
print '<input class="flat right width50" name="MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT" type="text" value="'.getDolGlobalInt('MAIN_SECURITY_MAX_IMG_IN_HTML_CONTENT').'"> '.strtolower($langs->trans("Images"));
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$langs->trans("MaxNumberOfPostOnPublicPagesByIP").'</td><td class="right">';
|
|
print '</td>';
|
|
print '<td class="nowrap">';
|
|
print '<input class="flat right width50" name="MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS" type="text" value="'.getDolGlobalInt("MAIN_SECURITY_MAX_POST_ON_PUBLIC_PAGES_BY_IP_ADDRESS", 200).'"> '.strtolower($langs->trans("Posts"));
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$langs->trans("MaxNumberOfAttachementOnForms").'</td><td class="right">';
|
|
print '</td>';
|
|
print '<td class="nowrap">';
|
|
print '<input class="flat right width50" name="MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS" type="text" value="'.getDolGlobalInt("MAIN_SECURITY_MAX_ATTACHMENT_ON_FORMS", 10).'"> '.strtolower($langs->trans("Files"));
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$langs->trans("MaxNumberOfFailedAuth").'</td><td class="right">';
|
|
print '</td>';
|
|
print '<td class="nowrap">';
|
|
print '<input class="flat right width50" name="MAIN_SECURITY_MAX_NUMBER_FAILED_AUTH" type="text" value="'.getDolGlobalInt("MAIN_SECURITY_MAX_NUMBER_FAILED_AUTH", 100).'"> '.$langs->trans("FailedAuth");
|
|
print '</td>';
|
|
print '</tr>';
|
|
|
|
/*
|
|
if (empty($conf->global->MAIN_APPLICATION_TITLE)) {
|
|
$conf->global->MAIN_APPLICATION_TITLE = "";
|
|
}
|
|
print '<tr class="oddeven">';
|
|
print '<td>'.$langs->trans("MAIN_APPLICATION_TITLE").'</td><td class="right">';
|
|
print '</td>';
|
|
print '<td class="nowrap">';
|
|
print '<input class="flat" name="MAIN_APPLICATION_TITLE" type="text" size="20" value="'.dol_escape_htmltag($conf->global->MAIN_APPLICATION_TITLE).'"> ';
|
|
print '</td>';
|
|
print '</tr>';
|
|
*/
|
|
|
|
print '</table>';
|
|
|
|
print $form->buttonsSaveCancel("Modify", '');
|
|
|
|
print dol_get_fiche_end();
|
|
|
|
print '</form>';
|
|
|
|
// End of page
|
|
llxFooter();
|
|
$db->close();
|