Gecko [ www.ctm-euromeuble.fr ]

Name	Size	Permission	Date
index.html	1 B	-rw-r--r--	2023-12-15 13:44
test_arrays.php	17.66 KB	-rw-r--r--	2023-12-15 13:44
test_badges.php	16.59 KB	-rw-r--r--	2023-12-15 13:44
test_buttons.php	5.17 KB	-rw-r--r--	2023-12-15 13:44
test_csrf.php	2.46 KB	-rw-r--r--	2023-12-15 13:44
test_exec.php	2.47 KB	-rw-r--r--	2023-12-15 13:44
test_forms.php	7.15 KB	-rw-r--r--	2023-12-15 13:44
test_sessionlock.php	2.45 KB	-rw-r--r--	2023-12-15 13:44

Rename

<?php
if (!defined('NOREQUIREUSER')) {
	define('NOREQUIREUSER', '1');
}
if (!defined('NOREQUIREDB')) {
	define('NOREQUIREDB', '1');
}
if (!defined('NOREQUIRESOC')) {
	define('NOREQUIRESOC', '1');
}
if (!defined('NOREQUIRETRAN')) {
	define('NOREQUIRETRAN', '1');
}
if (!defined('NOSTYLECHECK')) {
	define('NOSTYLECHECK', '1'); // Do not check style html tag into posted data
}
if (!defined('NOREQUIREMENU')) {
	define('NOREQUIREMENU', '1'); // If there is no need to load and show top and left menu
}
if (!defined('NOREQUIREHTML')) {
	define('NOREQUIREHTML', '1'); // If we don't need to load the html.form.class.php
}
if (!defined('NOREQUIREAJAX')) {
	define('NOREQUIREAJAX', '1'); // Do not load ajax.lib.php library
}
if (!defined("NOLOGIN")) {
	define("NOLOGIN", '1'); // If this page is public (can be called outside logged session)
}
// If you don't need session management (can't be logged if no session used). You must also set
// NOCSRFCHECK, NOTOKENRENEWAL, NOLOGIN
// Disable module with GETPOST('disablemodules') won't work. Variable 'dol_...' will not be set.
// $_SESSION are then simple vars if sessions are not active.
// TODO We can close session with session_write_close() as soon as we just need read access everywhere in code.
if (!defined("NOSESSION")) {
	define("NOSESSION", '1');
}

// Load Dolibarr environment
require '../../main.inc.php';

// Security
if ($dolibarr_main_prod) {
	accessforbidden('Access forbidden when $dolibarr_main_prod is set to 1');
}

/*
 * View
 */

header("Content-type: text/html; charset=UTF8");

// Security options
header("X-Content-Type-Options: nosniff"); // With the nosniff option, if the server says the content is text/html, the browser will render it as text/html (note that most browsers now force this option to on)
header("X-Frame-Options: SAMEORIGIN"); // Frames allowed only if on same domain (stop some XSS attacks)

print "*** TEST READ OF /tmp/test.txt FILE \n";

$out='';
$ret=0;

$file = '/tmp/test.txt';
$f=fopen($file, 'r');
if ($f) {
	$s=fread($f, 4096);
	print $s;
	fclose($f);
} else {
	print "Failed to open file ".$file." \n";
}

print ' '."\n";

print "*** TEST READ OF /test.txt FILE AND LS /dev/std* \n";

exec('cat /test.txt; ls /dev/std*; sleep 1;', $out, $ret);
print "ret=".$ret." \n";
print_r($out);
print ' ';

print ' '."\n";

print "*** TRY TO RUN CLAMDSCAN \n";

$ret = 0;
$out = null;
exec('/usr/bin/clamdscan --fdpass filethatdoesnotexists.php', $out, $ret);
print "ret=".$ret." \n";
print_r($out);