This file is indexed.

/usr/share/pluxml/update/update_5.1.1.php is in pluxml 5.3-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
<?php
/**
 * Classe de mise a jour pour PluXml version 5.1.1
 *
 * @package PLX
 * @author	Stephane F
 **/
class update_5_1_1 extends plxUpdate{

	# Migration du fichier des utilisateurs: renforcement des mots de passe
	public function step1() {

		echo L_UPDATE_USERS_MIGRATION."<br />";

		# On génère le fichier XML
		$xml = "<?xml version=\"1.0\" encoding=\"".PLX_CHARSET."\"?>\n";
		$xml .= "<document>\n";
		foreach($this->plxAdmin->aUsers as $user_id => $user) {
			$salt = plxUtils::charAleatoire(10);
			$password = sha1($salt.$user['password']);
			$xml .= "\t".'<user number="'.$user_id.'" active="'.$user['active'].'" profil="'.$user['profil'].'" delete="'.$user['delete'].'">'."\n";
			$xml .= "\t\t".'<login><![CDATA['.plxUtils::cdataCheck($user['login']).']]></login>'."\n";
			$xml .= "\t\t".'<name><![CDATA['.plxUtils::cdataCheck($user['name']).']]></name>'."\n";
			$xml .= "\t\t".'<infos><![CDATA['.plxUtils::cdataCheck($user['infos']).']]></infos>'."\n";
			$xml .= "\t\t".'<password><![CDATA['.$password.']]></password>'."\n";
			$xml .= "\t\t".'<salt><![CDATA['.$salt.']]></salt>'."\n";
			$xml .= "\t\t".'<email><![CDATA['.$user['email'].']]></email>'."\n";
			$xml .= "\t\t".'<lang><![CDATA['.$user['lang'].']]></lang>'."\n";
			$xml .= "\t</user>\n";
		}
		$xml .= "</document>";

		if(!plxUtils::write($xml,PLX_ROOT.$this->plxAdmin->aConf['users'])) {
			echo '<p class="error">'.L_UPDATE_ERR_USERS_MIGRATION.' ('.$this->plxAdmin->aConf['users'].')</p>';
			return false;
		}

		return true;
	}

}
?>