lighttpd remote signups

[sql-web.git] / batch / signup.php

diff --git a/batch/signup.php b/batch/signup.php
index 99785226b2b3dc2ce762eadf19bc86910f300094..20175b97dfdfc7ac28a242af27095208aeb1447e 100755 (executable)
--- a/batch/signup.php
+++ b/batch/signup.php
@@ -6,10 +6,17 @@ require_once('mitsql.lib.php');
 
 require_once('batch.inc.php');
 
-$myUsername = $argv[1];
-$myUID = $argv[3];
-if ($myUID<100) exit('bad UID');
+if (isset($argv) && count($argv)>=4) {
+    $myUsername = $argv[1];
+    $myUID = $argv[3];
+    if ($myUID<100) exit('bad UID');
+} elseif (defined('SIGNUP_PW') && strlen(SIGNUP_PW) && (isset($_SERVER['HTTP_AUTHORIZATION']) || isset($_SERVER['PHP_AUTH_PW'])) && SIGNUP_PW == $_SERVER['PHP_AUTH_PW']) {
+    $myUsername = $i_u;
+} else {
+    exit;
+}
 
+if (empty($myUsername)) exit('bad User');
 $hescmd = "hesinfo $myUsername passwd";
 $hesinfo = explode(':', trim(exec($hescmd)));
 if (count($hesinfo)>=4) {