Don't scream out passwords on overview

Don't print ftp password by default. Prevents accidental leaks / screengrabs of sensitive infos.
This commit is contained in:
MadMakz 2020-08-09 10:39:44 +02:00 committed by GitHub
parent 899044a82c
commit 2266dd28db
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -158,7 +158,7 @@
<?php if(($pa['ftpaccess'] or $pa['miniroot']) and $table_row['ftpAllowed']) { ?>
<li class="list-group-item"><b><?php echo $sprache->ftp_link;?>:</b>
<a href="<?php echo $table_row['ftpdata'];?>">
<?php echo $table_row['ftpdata'];?>
<?php echo str_replace($table_row['cftppass'], str_repeat("*", strlen($table_row['cftppass'])), $table_row['ftpdata']);?>
</a>
</li>
<?php } ?>
@ -169,11 +169,12 @@
<?php echo $table_row['cname'];?>
</li>
<li class="list-group-item"><b><?php echo $sprache->ftp_password;?>:</b>
<?php echo $table_row['cftppass'];?>
<div id="cftppass-<?php echo $gsa; ?>" style="display:none"><?php echo $table_row['cftppass'];?></div>
<button title="" class="btn btn-outline-warning inline" type="button" onclick="if(document.getElementById('cftppass-<?php echo $gsa; ?>') .style.display=='none') {document.getElementById('cftppass-<?php echo $gsa; ?>') .style.display='inline'}else{document.getElementById('cftppass-<?php echo $gsa; ?>') .style.display='none'}"><i class="fa fa-eye"></i></button>
</li>
<li class="list-group-item"></li>
</ul>
</div>
</div></section></section></div></div>
<?php }?>
</div></div>
</div></div>