From: moodler <moodler>
Date: Wed, 21 May 2003 09:39:51 +0000 (+0000)
Subject: Removed the remote debugging functions.
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=d805c3462e1ab9e7b5e1f2dde2f0294c328a2e6a;p=moodle.git

Removed the remote debugging functions.

I used to find these quite useful for helping people debug
configuration problems. I don't think they present a security
problem, but I can see there is the possibility that it can
be PERCEIVED as an issue, and I don't want to be responsible
for that, nor blamed for any break-ins (warranty or not).

So I'll find another way to do remote debugging.
---

diff --git a/admin/config.php b/admin/config.php
index b144ec2b3e..05197f75bc 100644
--- a/admin/config.php
+++ b/admin/config.php
@@ -1,29 +1,9 @@
 <?PHP  // $Id$
        // config.php - allows admin to edit all configuration variables
 
-
-    if (isset($_GET['phpinfo'])) {    // For debugging purposes, protected by password
-        if (md5($_GET['phpinfo']) == "caf9b6b99962bf5c2264824231d7a40c") {
-            phpinfo();
-            exit;
-        }
-    }
-
     require_once("../config.php");
 	require_once("../lib/countries.php");
 
-    if (isset($config)) {    // For debugging purposes, protected by password
-        if (md5($config) == "caf9b6b99962bf5c2264824231d7a40c") {
-            if ($site = get_site()) {
-                print_heading("$site->fullname");
-            }
-            $TEMPCFG = $CFG;
-            unset($TEMPCFG->dbuser);
-            unset($TEMPCFG->dbpass);
-            print_object($TEMPCFG);
-            exit;
-        }
-    }
 
     if ($site = get_site()) {   // If false then this is a new installation
         require_login();
@@ -32,7 +12,6 @@
         }
     }
 
-
 /// This is to overcome the "insecure forms paradox"
     if (isset($secureforms) and $secureforms == 0) {
         $match = "nomatch";