[arm-allstar] lsnodes update

Doug Crompton wa3dsp at gmail.com
Sun Apr 28 17:00:43 EDT 2019


An update went out today for lsnodes that corrected some errors and added
some functionality. Note that security has been added to lsnodes which
requires oyu to be logged into supermon UNLESS you create the zero length
file called lsnodes_no_supermon_pw in the /srv/http/lsnodes/  If you do
this understand that lsnodes is vulnerable to allowing outside users to
execute commands if you have your http port forwarded. By default it is
more secure and should be left this way if you use supermon or lsnodes
publicly.

The following changes were made -

/srv/http/cgi-bin/lsnodes_web

       Corrected long standing error - now nodes marked with a  '*' are
directly connected
       Formerly it did not match all nodes.
       Added hostname for registration display  - nice to be able to see
which is which.

/srv/http/lsnodes/lsnodes_form.php

      Added check that you are logged into Supermon to allow use of lsnodes
commands.
      Will be documented in supermon howto.

      Add  /srv/http/lsnodes/lsnodes_no_supermon_pw    Zero length file to
turn off security.
      This will lockout any lsnodes user from commands when not using
supermon unless they add this file.


*73 Doug*

*WA3DSP*

*http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*


More information about the ARM-allstar mailing list