rmonla/dtic-DIIAA
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(ops): Inyección de credenciales 'utnlr' en Gestor de Archivos (APPs) con permisos de escritura

Browse Source
This commit is contained in:
Ricardo Monla
2026-02-25 19:12:35 -03:00
parent a52b18a98e
commit 01405e740a
2 changed files with 17 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servicios/apps/index.php
+16 -17
View File
@@ -27,13 +27,12 @@ $use_auth = true;
// Generate secure password hash - https://tinyfilemanager.github.io/docs/pwd.html
$auth_users = array(
'rmonla' => '$2y$10$UfZGPTOglFaCpkRrYyWESeBtkgI8jIR24pAYS/TkuDlehWZaCOQtu', //lhsurnm77NS8
'utnlarioja' => '$2y$10$ttPlWYT1jgGI.WJhEiWpgeBzYlqHb5s4k30Yq.T5LoY2Q3YhuUEqG', //utnlarioja
'utnlr' => '$2y$10$YUzDzAvWwolsrlj9gqGGNex097gUT4jw/rKdoh7U6yrVu.p.C9.Ja', //utnlarioja
);
// Readonly users
// e.g. array('users', 'guest', ...)
$readonly_users = array(
'utnlarioja'
);
// Global readonly, including when auth is not being used
@@ -4981,22 +4980,22 @@ function fm_show_header()
<!-- Confirm Modal -->
<script type="text/html" id="js-tpl-confirm">
<div class="modal modal-alert confirmDailog" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" role="dialog" id="confirmDailog-<%this.id%>" data-bs-theme="<?php echo FM_THEME; ?>">
<div class="modal-dialog" role="document">
<form class="modal-content rounded-3 shadow" method="post" autocomplete="off" action="<%this.action%>">
<div class="modal-body p-4 text-center">
<h5 class="mb-2"><?php echo lng('Are you sure want to') ?> <%this.title%> ?</h5>
<p class="mb-1"><%this.content%></p>
</div>
<div class="modal-footer flex-nowrap p-0">
<button type="button" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0 border-end" data-bs-dismiss="modal"><?php echo lng('Cancel') ?></button>
<input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
<button type="submit" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0" data-bs-dismiss="modal"><strong><?php echo lng('Okay') ?></strong></button>
</div>
</form>
<div class="modal modal-alert confirmDailog" data-bs-backdrop="static" data-bs-keyboard="false" tabindex="-1" role="dialog" id="confirmDailog-<%this.id%>" data-bs-theme="<?php echo FM_THEME; ?>">
<div class="modal-dialog" role="document">
<form class="modal-content rounded-3 shadow" method="post" autocomplete="off" action="<%this.action%>">
<div class="modal-body p-4 text-center">
<h5 class="mb-2"><?php echo lng('Are you sure want to') ?> <%this.title%> ?</h5>
<p class="mb-1"><%this.content%></p>
</div>
<div class="modal-footer flex-nowrap p-0">
<button type="button" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0 border-end" data-bs-dismiss="modal"><?php echo lng('Cancel') ?></button>
<input type="hidden" name="token" value="<?php echo $_SESSION['token']; ?>">
<button type="submit" class="btn btn-lg btn-link fs-6 text-decoration-none col-6 m-0 rounded-0" data-bs-dismiss="modal"><strong><?php echo lng('Okay') ?></strong></button>
</div>
</form>
</div>
</div>
</div>
</script>
</script>
<?php
}