]> git.wh0rd.org Git - tt-rss.git/commitdiff
projects / tt-rss.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 74eef4f)
sanity check: prevent running tt-rss as root
authorAndrew Dolgov <fox@madoka.volgo-balt.ru>
Fri, 17 Feb 2012 13:36:18 +0000 (17:36 +0400)
committerAndrew Dolgov <fox@madoka.volgo-balt.ru>
Fri, 17 Feb 2012 13:36:18 +0000 (17:36 +0400)
include/sanity_check.php patch | blob | history

diff --git a/include/sanity_check.php b/include/sanity_check.php
index d1b2873ca1e2d9427cd61b8618ff64a6315e3198..3de1593f35dbba6169afbdeec43b734e7fed8815 100644 (file)
--- a/include/sanity_check.php
+++ b/include/sanity_check.php
@@ -11,6 +11,10 @@
                require_once "config.php";
                require_once "sanity_config.php";
 
+               if (function_exists('posix_getuid') && posix_getuid() == 0) {
+                       $err_msg = "Please don't run this script as root.";
+               }
+
                if (CONFIG_VERSION != EXPECTED_CONFIG_VERSION) {
                        $err_msg = "Configuration file (config.php) has incorrect version. Update it with new options from config.php-dist and set CONFIG_VERSION to the correct value.";
                }
@@ -116,7 +120,7 @@
                }
        }
 
-       if ($err_msg) { ?>
+       if ($err_msg && defined($_SERVER['REQUEST_URI'])) { ?>
                <html>
                <head>
                <title>Fatal error</title>
@@ -142,6 +146,8 @@
 
        <?php
                die;
+       } else if ($err_msg) {
+               die("[sanity_check] $err_msg\n");
        }
 
 ?>
web-based news feed (RSS/Atom) reader and aggregator; see https://tt-rss.org/