From e4242e74fa2594b55b0043d7f943f1fbe2eb44de Mon Sep 17 00:00:00 2001
From: Bart van Bragt <bartvb@users.sourceforge.net>
Date: Sat, 16 Feb 2002 10:35:40 +0000
Subject: [PATCH] Fixed some security problems for those people that didn't
 remove or disable the /develop/ dir in their CVS install

git-svn-id: file:///svn/phpbb/trunk@2168 89ea8834-ac86-4346-8a33-228a782c2dd0
---
 phpBB/develop/bbcode_conversion.php     | 17 +++++++++++++++--
 phpBB/develop/benchmark.php             | 15 +++++++++++++++
 phpBB/develop/convert_avatars.php       | 14 ++++++++++++++
 phpBB/develop/convert_bbcodeuid.php     | 14 ++++++++++++++
 phpBB/develop/convert_conf.php          | 14 ++++++++++++++
 phpBB/develop/convert_privmsgs.php      | 14 ++++++++++++++
 phpBB/develop/convert_sigs.php          | 13 +++++++++++++
 phpBB/develop/convert_user_regdates.php | 16 +++++++++++++++-
 phpBB/develop/most_users_update.php     | 15 ++++++++++++++-
 phpBB/develop/nuke-db.php               | 15 +++++++++++++++
 phpBB/develop/search_fill.php           | 13 +++++++++++++
 11 files changed, 156 insertions(+), 4 deletions(-)

diff --git a/phpBB/develop/bbcode_conversion.php b/phpBB/develop/bbcode_conversion.php
index e3439c91cd..f340b7d18f 100644
--- a/phpBB/develop/bbcode_conversion.php
+++ b/phpBB/develop/bbcode_conversion.php
@@ -1,6 +1,6 @@
 <?php
 /***************************************************************************  
- *                               config.php  
+ *                           bbcode_conversion.php  
  *                            -------------------                         
  *   begin                : Tuesday, March 20, 2001 
  *   copyright            : (C) 2001 The phpBB Group        
@@ -21,6 +21,19 @@
  *                                                          
  * 
  ***************************************************************************/ 
+
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
  
 include('../extension.inc');
 include('../config.'.$phpEx);
@@ -202,4 +215,4 @@ function undo_make_clickable($text) {
 
 
  
-?>
\ No newline at end of file
+?>
diff --git a/phpBB/develop/benchmark.php b/phpBB/develop/benchmark.php
index d4ab617d83..39cc110b70 100644
--- a/phpBB/develop/benchmark.php
+++ b/phpBB/develop/benchmark.php
@@ -1,4 +1,19 @@
 <?php
+
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 $phpbb_root_path = "../";
 include($phpbb_root_path . 'extension.inc');
 include($phpbb_root_path . 'common.'.$phpEx);
diff --git a/phpBB/develop/convert_avatars.php b/phpBB/develop/convert_avatars.php
index f6069a1e4a..4f090451d6 100644
--- a/phpBB/develop/convert_avatars.php
+++ b/phpBB/develop/convert_avatars.php
@@ -1,5 +1,19 @@
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 $phpbb_root_path = "../";
 
 include($phpbb_root_path . 'extension.inc');
diff --git a/phpBB/develop/convert_bbcodeuid.php b/phpBB/develop/convert_bbcodeuid.php
index 9e2f959046..4a2a223e20 100644
--- a/phpBB/develop/convert_bbcodeuid.php
+++ b/phpBB/develop/convert_bbcodeuid.php
@@ -1,5 +1,19 @@
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 $phpbb_root_path = "../";
 
 include($phpbb_root_path . 'extension.inc');
diff --git a/phpBB/develop/convert_conf.php b/phpBB/develop/convert_conf.php
index 0fbb27de5c..09c71e8c03 100644
--- a/phpBB/develop/convert_conf.php
+++ b/phpBB/develop/convert_conf.php
@@ -1,5 +1,19 @@
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 $phpbb_root_path = "../";
 
 include($phpbb_root_path . 'extension.inc');
diff --git a/phpBB/develop/convert_privmsgs.php b/phpBB/develop/convert_privmsgs.php
index 847d3e20cc..df4f662c8e 100644
--- a/phpBB/develop/convert_privmsgs.php
+++ b/phpBB/develop/convert_privmsgs.php
@@ -1,5 +1,19 @@
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 $phpbb_root_path = "../";
 
 include($phpbb_root_path . 'extension.inc');
diff --git a/phpBB/develop/convert_sigs.php b/phpBB/develop/convert_sigs.php
index c55db263cf..501106fc10 100644
--- a/phpBB/develop/convert_sigs.php
+++ b/phpBB/develop/convert_sigs.php
@@ -1,5 +1,18 @@
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
 $phpbb_root_path = "../";
 
 include($phpbb_root_path . 'extension.inc');
diff --git a/phpBB/develop/convert_user_regdates.php b/phpBB/develop/convert_user_regdates.php
index 15d397ef36..21737edda4 100644
--- a/phpBB/develop/convert_user_regdates.php
+++ b/phpBB/develop/convert_user_regdates.php
@@ -2,6 +2,20 @@
 <body>
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 chdir("../");
 
 include('extension.inc');
@@ -67,4 +81,4 @@ include('includes/db.'.$phpEx);
 
 ?>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/phpBB/develop/most_users_update.php b/phpBB/develop/most_users_update.php
index 6f78390218..b914424ce8 100644
--- a/phpBB/develop/most_users_update.php
+++ b/phpBB/develop/most_users_update.php
@@ -2,6 +2,19 @@
 <body>
 <?php
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
 	$phpbb_root_path = "../";
 
 	include($phpbb_root_path . 'extension.inc');
@@ -26,4 +39,4 @@
 
 ?>
 </body>
-</html>
\ No newline at end of file
+</html>
diff --git a/phpBB/develop/nuke-db.php b/phpBB/develop/nuke-db.php
index 47da269c6b..d7329c3f56 100644
--- a/phpBB/develop/nuke-db.php
+++ b/phpBB/develop/nuke-db.php
@@ -1,4 +1,19 @@
 <?php
+
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
+
 // Just a handy script to completely wipe out the contents of a 
 // database.. Use with caution :)
 
diff --git a/phpBB/develop/search_fill.php b/phpBB/develop/search_fill.php
index 711dd99bf2..c03c6f9eb1 100644
--- a/phpBB/develop/search_fill.php
+++ b/phpBB/develop/search_fill.php
@@ -1,5 +1,18 @@
 <?php 
 
+//
+// Security message:
+//
+// This script is potentially dangerous.
+// Remove or comment the next line (die(".... ) to enable this script.
+// Do NOT FORGET to either remove this script or disable it after you have used it.
+//
+die("Please read the first lines of this script for instructions on how to enable it");
+
+//
+// Do not change anything below this line.
+//
+
 set_time_limit(0);
 $common_percent = 0.4; // Percentage of posts in which a word has to appear to be marked as common