CVS New User Page Design
From SecurityForest
(Note: Moved here from the Todo_List as this task has been completed)
[edit]
ExploitTree New User for CVS
Anyone perficient in basic php and shellscipt coding please contact Loni or leave a note here. We would like to have a page that a user may request access to the CVS instead of emailing his request and then manually processing it. The design is as follows (but can change if you have other ideas):
- PHP page that has the fields of username, password, email (all fields are mandatory)
- The php should do parameter validation for only a-zA-Z0-9.
- The php will pass the parameters to a shellscript that will:
- Add the params to test file to be processed
- Another shellscript will be interactive for the cvs administrator where he is presented with each users request, and he either approves or denies it.
- If it is approved - the account is created and an email is sent to the user
- If it is denied - the administrator is given an option to supply a reason, which is then sent to the user
Completed: Loni 23:53, 30 Sep 2004 (IST)
