Skip to content

W
White Rabbit Switch - Software
Commit 945de6ef authored by Benoit Rat's avatar Benoit Rat
Browse files
Options

www: check firmware filename to avoid uploading wrong file 

It also delete temporary files
parent 47a041e0
Hide whitespace changes
Inline Side-by-side
Showing with 26 additions and 9 deletions
userspace/rootfs_override/var/www/firmware.php
View file @ 945de6ef
......@@ -57,9 +57,9 @@
<hr>
</div>
<?php
wrs_change_wrfs("rw");
//wrs_change_wrfs("rw");
wrs_management();
wrs_change_wrfs("ro");
//wrs_change_wrfs("ro");
?>
......
userspace/rootfs_override/var/www/functions.php
View file @ 945de6ef
......@@ -565,8 +565,8 @@ function wrs_load_files(){
function wrs_management(){
$cmd = htmlspecialchars($_POST["cmd"]);
if(!strcmp($cmd, "halt")){
echo '<br><br><br></be>System is halting';
$output = shell_exec($cmd);
......@@ -590,15 +590,32 @@ function wrs_management(){
} else if (!empty($_FILES['file']['name'])){
$uploaddir = '/tmp/';
$uploadfile = $uploaddir . basename($_FILES['file']['name']);
$uploadfname= basename($_FILES['file']['name']);
$uploadfile = $uploaddir . $uploadfname;
echo '<pre>';
if (move_uploaded_file($_FILES['file']['tmp_name'], $uploadfile)) {
echo '<p align=center ><font color="red"><br>Upgrade procedure will take place after reboot.<br>Please do not switch off the device during flashing procedure.</font></p>';
rename($uploadfile, "/update/".($_FILES['file']['name']));
//Reboot switch
shell_exec("reboot");
if ($uploadfname=="barebox.bin" || $uploadfname=="wrs-firmware.tar" || $uploadfname=="zImage")
{
rename($uploadfile, "/update/".($_FILES['file']['name']));
unlink($uploadfile);
//Reboot switch
shell_exec("$(sleep 10; reboot) &");
}
else if(substr($uploadfname,0,14)=="wr-switch-sw-v" && substr($uploadfname,-13)=="_binaries.tar")
{
rename($uploadfile, "/update/wrs-firmware.tar");
unlink($uploadfile);
//Reboot switch
shell_exec("$(sleep 10; reboot) &");
}
else
{
echo "<center class=\"error\">Incorrect filename, please choose a filename as:<br> barebox.bin, zImage, wrs-firmware.tar or wr-switch-sw-vX.X-YYYYMMDD_binaries.tar.</center>\n";
unlink($uploadfile);
}
} else {
echo "<center>Something went wrong. File was not uploaded.</center>\n";
echo "<center class=\"error\">Something went wrong. File was not uploaded.</center>\n";
}
echo "</pre>";
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment