Changeset 7793

Show
Ignore:
Timestamp:
06/05/09 17:59:20 (4 years ago)
Author:
xrobau
Message:

fixes #3644 - Fix hardcoded astetcdir, fix insecure temp file generation. Thanks to tbyte!

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • modules/branches/2.5/manager/functions.inc.php

    r2521 r7793  
    22 
    33function manager_gen_conf() { 
    4   $file = "/tmp/manager_additional_".rand().".conf"; 
     4  global $amp_conf; 
     5 
     6  $file = tempnam("/tmp", "manager_additional_"); 
    57  $content = ""; 
    68  $managers = manager_list(); 
     
    2628  fwrite($fd, $content); 
    2729  fclose($fd); 
    28   if (!rename($file, "/etc/asterisk/manager_additional.conf")) { 
     30  if (!rename($file, $amp_conf['ASTETCDIR']."/manager_additional.conf")) { 
    2931    echo "<script>javascript:alert('"._("Error writing the manager additional file.")."');</script>"; 
    3032  }