sanity check: prevent running tt-rss as root

13 years ago · 3854d15e12
parent 74eef4fca8
commit 3854d15e12
1 changed files with 7 additions and 1 deletions
--- a/include/sanity_check.php
+++ b/include/sanity_check.php
@ -11,6 +11,10 @@
 		require_once "config.php";
 		require_once "sanity_config.php";

+		if (function_exists('posix_getuid') && posix_getuid() == 0) {
+			$err_msg = "Please don't run this script as root.";
+		}
+
 		if (CONFIG_VERSION != EXPECTED_CONFIG_VERSION) {
 			$err_msg = "Configuration file (config.php) has incorrect version. Update it with new options from config.php-dist and set CONFIG_VERSION to the correct value.";
 		}
@ -116,7 +120,7 @@
 		}
 	}

-	if ($err_msg) { ?>
+	if ($err_msg && defined($_SERVER['REQUEST_URI'])) { ?>
 		<html>
 		<head>
 		<title>Fatal error</title>
@ -142,6 +146,8 @@

 	<?php
 		die;
+	} else if ($err_msg) {
+		die("[sanity_check] $err_msg\n");
 	}

 ?>