[TikiWiki-commits] [Git][tikiwiki/tiki][28.x] [BP][FIX] Potentially unsafe files reported by doc/devtools/securitycheck

ushindi bienvenu pushed to branch 28.x at Tiki Wiki CMS Groupware / Tiki


Commits:
39df770f by ushindi bienvenu at 2026-01-29T23:59:11+00:00
[BP][FIX] Potentially unsafe files reported by doc/devtools/securitycheck
---
* [FIX] Potentially unsafe files reported by doc/devtools/securitycheck
---
* [FIX] Potentially unsafe files reported by doc/devtools/securitycheck

See merge request tikiwiki/tiki!9448

See merge request tikiwiki/tiki!9450

- - - - -


11 changed files:

- permissioncheck/check.php
- permissioncheck/insane/check.php
- permissioncheck/mixed/check.php
- permissioncheck/morepain/check.php
- permissioncheck/moreworry/check.php
- permissioncheck/pain/check.php
- permissioncheck/paranoia-suphp/check.php
- permissioncheck/paranoia/check.php
- permissioncheck/risky/check.php
- permissioncheck/sbox/check.php
- permissioncheck/worry/check.php


Changes:

=====================================
permissioncheck/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/insane/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/mixed/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/morepain/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/moreworry/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/pain/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/paranoia-suphp/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/paranoia/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/risky/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/sbox/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;


=====================================
permissioncheck/worry/check.php
=====================================
@@ -1,7 +1,7 @@
 <?php
 
 $check_if_model_works = false;
-if (strpos($_SERVER['SCRIPT_NAME'], basename(__FILE__)) == false) {
+if (! str_contains($_SERVER['SCRIPT_NAME'], basename(__FILE__))) {
     //echo 'This model works';
     $check_if_model_works = true;
     return $check_if_model_works;



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/39df770fb18ba8ba06077cd8042bbd0e759a676c

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/39df770fb18ba8ba06077cd8042bbd0e759a676c
You're receiving this email because of your account on gitlab.com.

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs