sbrl-github/Pepperminty-Wiki
sbrl-github/Pepperminty-Wiki
1
0
Fork 0
mirror of https://github.com/sbrl/Pepperminty-Wiki.git synced 2024-11-25 17:23:00 +00:00
Code Activity

debug: obscure even more secrets

Browse source
This commit is contained in:
Starbeamrainbowlabs 2020-07-09 00:37:02 +01:00
parent fae6e3ecae
commit 450c2485ae
Signed by: sbrl
GPG key ID: 1BE5172E637709C2
1 changed files with 17 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
modules/page-debug-info.php
View file

@ -39,9 +39,9 @@ register_module([
echo("Powered by Pepperminty Wiki version $version+" . substr($commit, 0, 7) . ".\n"); echo("Powered by Pepperminty Wiki version $version+" . substr($commit, 0, 7) . ".\n");
echo("This report may contain personal information.\n\n"); echo("This report may contain personal information.\n\n");
echo("Environment: "); echo("Environment: ");
echo(var_export($env, true)); echo(debug_mask_secrets(var_export($env, true)));
echo("\nPaths: "); echo("\nPaths: ");
var_dump(var_export($paths, true)); echo(var_export($paths, true));
echo("\nServer information:\n"); echo("\nServer information:\n");
echo("uname -a: " . php_uname() . "\n"); echo("uname -a: " . php_uname() . "\n");
echo("Path: " . getenv("PATH") . "\n"); echo("Path: " . getenv("PATH") . "\n");
@ -56,12 +56,7 @@ register_module([
echo("Storage directory permissions: " . substr(sprintf('%o', fileperms($env->storage_prefix)), -4) . "\n"); echo("Storage directory permissions: " . substr(sprintf('%o', fileperms($env->storage_prefix)), -4) . "\n");
echo("Loaded extensions: " . implode(", ", get_loaded_extensions()) . "\n"); echo("Loaded extensions: " . implode(", ", get_loaded_extensions()) . "\n");
echo("Settings:\n-----\n"); echo("Settings:\n-----\n");
$settings_export = explode("\n", var_export($settings, true)); echo(debug_mask_secrets(var_export($settings, true)));
foreach ($settings_export as &$row)
{
if(preg_match("/'(secret|sitesecret|email(?:Address)?|password)'/i", $row)) $row = "********* secret *********";
}
echo(implode("\n", $settings_export));
echo("\n-----\n"); echo("\n-----\n");
exit(); exit();
}); });
@ -73,4 +68,18 @@ register_module([
} }
]); ]);
/**
* Masks secrets in debug output.
* @param string $text The text to mask.
* @return string The masked text.
*/
function debug_mask_secrets($text) {
$lines = explode("\n", $text);
foreach ($lines as &$line) {
if(preg_match("/'(secret|sitesecret|email(?:Address)?|password)'/i", $line)) $line = "********* secret *********";
}
return implode("\n", $lines);
}
?> ?>