[arm-allstar] lsnodes update

[Gervais Fillion]

Doug

is there an HOW to of how too ?

"UNLESS you create the zero length
file called lsnodes_no_supermon_pw in the /srv/http/lsnodes/  "

thanks
gervais




________________________________
De : ARM-allstar <arm-allstar-bounces at hamvoip.org> de la part de "Doug Crompton via ARM-allstar" <arm-allstar at hamvoip.org>
Envoyé : 28 avril 2019 17:00
À : ARM Allstar
Cc : Doug Crompton
Objet : [arm-allstar] lsnodes update

An update went out today for lsnodes that corrected some errors and added
some functionality. Note that security has been added to lsnodes which
requires oyu to be logged into supermon UNLESS you create the zero length
file called lsnodes_no_supermon_pw in the /srv/http/lsnodes/  If you do
this understand that lsnodes is vulnerable to allowing outside users to
execute commands if you have your http port forwarded. By default it is
more secure and should be left this way if you use supermon or lsnodes
publicly.

The following changes were made -

/srv/http/cgi-bin/lsnodes_web

       Corrected long standing error - now nodes marked with a  '*' are
directly connected
       Formerly it did not match all nodes.
       Added hostname for registration display  - nice to be able to see
which is which.

/srv/http/lsnodes/lsnodes_form.php

      Added check that you are logged into Supermon to allow use of lsnodes
commands.
      Will be documented in supermon howto.

      Add  /srv/http/lsnodes/lsnodes_no_supermon_pw    Zero length file to
turn off security.
      This will lockout any lsnodes user from commands when not using
supermon unless they add this file.


*73 Doug*

*WA3DSP*

*http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
_______________________________________________

ARM-allstar mailing list
ARM-allstar at hamvoip.org
http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar

Visit the BBB and RPi2/3 web page - http://hamvoip.org