From: bugreport%peshkin.net <>
Date: Sun, 22 Dec 2002 05:16:49 +0000 (+0000)
Subject: Bug 186383 Checksetup leaves editor backups of localconfig accessible
X-Git-Tag: bugzilla-2.16.3~38
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1b39921993f4191ff86d464966f36deed9c12b3c;p=thirdparty%2Fbugzilla.git

Bug 186383 Checksetup leaves editor backups of localconfig accessible
r=zach
a=justdave
---

diff --git a/checksetup.pl b/checksetup.pl
index 4d3c1e1587..66dce8744d 100755
--- a/checksetup.pl
+++ b/checksetup.pl
@@ -754,12 +754,27 @@ if ($my_create_htaccess) {
     open HTACCESS, ">.htaccess";
     print HTACCESS <<'END';
 # don't allow people to retrieve non-cgi executable files or our private data
-<FilesMatch ^(.*\.pl|localconfig|processmail|syncshadowdb|runtests.sh)$>
+<FilesMatch ^(.*\.pl|localconfig.*|processmail|syncshadowdb|runtests.sh)$>
   deny from all
 </FilesMatch>
 END
     close HTACCESS;
     chmod $fileperm, ".htaccess";
+  } else {
+    # 2002-12-21 Bug 186383
+    open HTACCESS, ".htaccess";
+    my $oldaccess = "";
+    while (<HTACCESS>) {
+      $oldaccess .= $_;
+    }
+    close HTACCESS;
+    if ($oldaccess =~ s/(localconfig)(\|)/$1.*$2/) {
+      print "Repairing .htaccess...\n";
+      open HTACCESS, ">.htaccess";
+      print HTACCESS $oldaccess;
+      close HTACCESS;
+    }
+
   }
   if (!-e "data/.htaccess") {
     print "Creating data/.htaccess...\n";