Debug mode only for admin user

Threaded Mode | Linear Mode

Debug mode only for admin user

Author Message

macbishop
Junior Member

Posts: 50
Group: Registered
Joined: Feb 2007
Status: Offline
Reputation: 5

Post: #1

Debug mode only for admin user

I think that is necessary change the function dump_gui_debug() in /var/www/ispcp/gui/include/debug.php in order that only the admin can use the debug mode into the panel.

Remember that...

Code:

$cfg['DUMP_GUI_DEBUG']==true;

... in /var/www/ispcp/gui/include/ispcp-lib.php to use this function

Code:

function dump_gui_debug()

{

    if (isset($_SESSION['user_logged']) && $_SESSION['user_logged']=='admin' || isset($_SESSION['logged_from']) && $_SESSION['logged_from'] == 'admin'){

        echo '<font color="#0000FF"><u>Content of <b>$_SESSION</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($_SESSION, true));

        echo '</pre>';

        echo '<font color="#0000FF"><u>Content of <b>$_POST</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($_POST,    true));

        echo '</pre>';

        echo '<font color="#0000FF"><u>Content of <b>$_GET</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($_GET,     true));

        echo '</pre>';

        echo '<font color="#0000FF"><u>Content of <b>$_COOKIE</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($_COOKIE,  true));

        echo '</pre>';

        echo '<font color="#0000FF"><u>Content of <b>$_FILES</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($_FILES,   true));

        echo '</pre>';

        echo '<font color="#0000FF"><u>Content of <b>$GLOBALS</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($GLOBALS,  true));

        echo '</pre>';

        echo '<font color="#0000FF"><u>Content of <b>$_SERVER</b>:</u><br /></font>';

        echo '<pre>';

        echo htmlentities(print_r($_SERVER,  true));

        echo '</pre>';

    }else{

        exit;

    }

}

01-16-2008 09:26 AM

raphael
Member

Posts: 474
Group: Dev Team
Joined: Apr 2007
Status: Offline
Reputation: 8

Post: #2

RE: Debug mode only for admin user

What would the use of that be? that var should only be enabled by developers or by testers (who obviously won't test something on a production server with real users).

And in case it is added I'd recommend to add an other option to disable the "only for admins" check. Why? some day there might be a bug which can't be spotted by admins but only by *real* users (admin level: user)

Quote:

This is Linux land. In silent nights you can hear the Windows machines rebooting.

If you want to be helped, don't PM me but post in the forums | If you want private support PM me and we'll discuss the price

01-17-2008 08:37 AM

macbishop
Junior Member

Posts: 50
Group: Registered
Joined: Feb 2007
Status: Offline
Reputation: 5

Post: #3

RE: Debug mode only for admin user

raphael Wrote:

What would the use of that be?

In production case, if in some moment I want to see the variables for testing something, I don't want that the users or resellers can see.

raphael Wrote:

And in case it is added I'd recommend to add an other option to disable the "only for admins" check.

On asume that the tester have knowledge and privileges to change 'admin' for 'user' or 'reseller' in the function. Also ist'n difficult to create a $cfg variable in /etc/ispcp/ispcp.conf and deploy in the function.

01-17-2008 09:21 AM

joximu
Moderator

Posts: 3,534
Group: Moderators
Joined: Jan 2007
Status: Offline
Reputation: 47

Post: #4

RE: Debug mode only for admin user

So, it should be visible only for a certain session - or a certain remote IP???

2008-03-16 ispCP RC4 released!!!

01-17-2008 09:25 AM

macbishop
Junior Member

Posts: 50
Group: Registered
Joined: Feb 2007
Status: Offline
Reputation: 5

Post: #5

RE: Debug mode only for admin user

joximu Wrote:

So, it should be visible only for a certain session

For me only for admin logged or logged from.
Is my opinion Smile

joximu Wrote:

or a certain remote IP

It's another viewpoint. and very valid if the tester have a static IP
Isn't difficult to resolve it with $_SERVER['REMOTE_ADDR']

If you want I can fix the code for that. Smile

01-17-2008 10:45 AM

« Next Oldest | Next Newest »

View a Printable Version
Send this Thread to a Friend
Subscribe to this Thread | Add Thread to Favorites