X-Git-Url: https://git.p6c8.net/devedit.git/blobdiff_plain/432cbc70862e1bf6ed058dfe75be03160ceea09f..df1e8791c8d9aa7c56f686490ac18a4fd1a43aa5:/devedit.pl?ds=inline diff --git a/devedit.pl b/devedit.pl index d74a1bc..783013d 100644 --- a/devedit.pl +++ b/devedit.pl @@ -6,7 +6,7 @@ # Dev-Editor's main program # # Author: Patrick Canterino -# Last modified: 2006-08-24 +# Last modified: 2010-12-24 # # Copyright (C) 1999-2000 Roland Bluethgen, Frank Schoenmann # Copyright (C) 2003-2009 Patrick Canterino @@ -55,10 +55,17 @@ abort($config->{'errors'}->{'no_root_access'}) unless(-r $config->{'fileroot'} & my $cgi = new CGI; my $command = $cgi->param('command') || 'show'; -my $file = $cgi->param('file') || '/'; +my $file = $cgi->param('file') || $config->{'startdir'} || '/'; my $curdir = $cgi->param('curdir') || ''; my $newfile = $cgi->param('newfile') || ''; +# Check if the command is disabled + +if(is_disabled_command($config->{'disable_commands'},$command)) +{ + abort($config->{'errors'}->{'command_disabled'},'/',{COMMAND => encode_html($command)}); +} + # Create physical and virtual path for the new file my $new_physical = '';