[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [FIX] Potentially unsafe files reported by doc/devtools/securitycheck

ushindi bienvenu pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
65f023a0 by ushindi bienvenu at 2026-01-29T22:36:43+00:00
[FIX] Potentially unsafe files reported by doc/devtools/securitycheck
---
* [FIX] Potentially unsafe files reported by doc/devtools/securitycheck

See merge request tikiwiki/tiki!9448

- - - - -


12 changed files:

- permissioncheck/check.php
- permissioncheck/insane/check.php
- permissioncheck/mixed/check.php
- permissioncheck/morepain/check.php
- permissioncheck/moreworry/check.php
- permissioncheck/pain/check.php
- permissioncheck/paranoia-suphp/check.php
- permissioncheck/paranoia/check.php
- permissioncheck/risky/check.php
- permissioncheck/sbox/check.php
- permissioncheck/worry/check.php
- − tiki-edit_templates.php


Changes:

=====================================
permissioncheck/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/insane/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/mixed/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/morepain/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/moreworry/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/pain/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/paranoia-suphp/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/paranoia/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/risky/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/sbox/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/worry/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
tiki-edit_templates.php deleted
=====================================



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/65f023a0817050fa75e8434d8ffa50042069f847

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/65f023a0817050fa75e8434d8ffa50042069f847
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs