modules/index/include/x509.php (494545a) - webinterface.git

x509.php

<?php

require_once('inc/security.php');

function get_cert_by_id($id) 
{
  $id = (int) $id;
	if ($id == 0)
	  system_failure('no ID');
	$query = "SELECT id,dn,issuer,cert,username,startpage FROM system.clientcert WHERE `id`='{$id}' LIMIT 1";
	$result = db_query($query);
	if (mysql_num_rows($result) < 1)
		return NULL;
	$ret = mysql_fetch_assoc($result);
  DEBUG($ret);
  return $ret;
}

function add_clientcert($certdata, $dn, $issuer, $startpage='')
{
  $type = 'user';
  if (isset($_SESSION['subuser']))
    $type = 'subuser';
  $certdata = mysql_real_escape_string($certdata);
  $dn = maybe_null(mysql_real_escape_string($dn));
  $issuer = maybe_null(mysql_real_escape_string($issuer));
  if ($startpage &&  ! check_path($startpage))
    system_failure('Startseite kaputt');
  $startpage = maybe_null(mysql_real_escape_string($startpage));

$username = mysql_real_escape_string($_SESSION['userinfo']['username']);
  if ($type == 'subuser')
    $username = $_SESSION['subuser'];
  if ($username == '')
    system_failure('Kein Username');

if ($certdata == '')
    system_failure('Kein Zertifikat');
  DEBUG($certdata);
  DEBUG($dn);
  DEBUG($issuer);

db_query("INSERT INTO system.clientcert (`dn`, `issuer`, `cert`, `type`, `username`, `startpage`) 
VALUES ({$dn}, {$issuer}, '{$certdata}', '{$type}', '{$username}', {$startpage})");

}

webinterface.git

Erlaube das Löschen von Client-Certs für einen Subuser